Common use of Processing of Client Personal Data Clause in Contracts

Processing of Client Personal Data. 3.1 Company and each Company Affiliate shall: 3.1.1 comply with all applicable Data Protection Laws in the Processing of Client Personal Data; and 3.1.2 not Process Client Personal Data other than on the relevant Client Group Member’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Company or the relevant Company Affiliate shall to the extent permitted by Applicable Laws inform the relevant Client Group Member of that legal requirement before the relevant Processing of that Client Personal Data unless Applicable Laws prohibit this notification on important grounds of public interest. 3.2 Each Client Group Member: 3.2.1 instructs Company and each Company Affiliate (and authorises Company and each Company Affiliate to instruct each Sub-processor) to:‌ 3.2.1.1 Process Client Personal Data; and 3.2.1.2 in particular, transfer Client Personal Data outside the EU/EEA/UK as reasonably necessary for the provision of the Services and consistent with the Agreement; and 3.2.2 warrants and represents that it is and will at all relevant times remain duly and effectively authorised to give the instruction set out in Section 3.2.1 on behalf of each relevant Client Affiliate. 3.3 Annex 1 to this Addendum sets out certain information regarding the Contracted Processors' Processing of the Client Personal Data as required by article 28

Processing of Client Personal Data. 3.1 Company and each Company Affiliate shall: 3.1.1 comply with all applicable Data Protection Laws in the Processing of Client Personal Data; and 3.1.2 not Process Client Personal Data other than on the relevant Client Group Member’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Company or the relevant Company Affiliate shall to the extent permitted by Applicable Laws inform the relevant Client Group Member of that legal requirement before the relevant Processing of that Client Personal Data unless Applicable Laws prohibit this notification on important grounds of public interest. 3.2 Each Client Group Member: 3.2.1 instructs Company and each Company Affiliate (and authorises Company and each Company Affiliate to instruct each Sub-processor) to:‌ 3.2.1.1 Process Client Personal Data; and 3.2.1.2 in particular, transfer Client Personal Data outside the EU/EEA/UK as reasonably necessary for the provision of the Services and consistent with the Agreement; and 3.2.2 warrants and represents that it is and will at all relevant times remain duly and effectively authorised to give the instruction set out in Section 3.2.1 on behalf of each relevant Client Affiliate. 3.3 Annex 1 to this Addendum sets out certain information regarding the Contracted Processors' Processing of the Client Personal Data as required by article 2828(3) EU GDPR (and, where‌ applicable, equivalent requirements of other Data Protection Laws). Client may make reasonable amendments to Annex 1 by written notice to Company from time to time as Client reasonably considers necessary to meet those requirements. Nothing in Annex 1 (including as amended pursuant to this section 3.3) confers any right or imposes any obligation on any party to this Addendum.