Common use of Processing of Company Personal Data Clause in Contracts

Processing of Company Personal Data. 3.1. Vendor and each Vendor Affiliate shall: 3.1.1. comply with all applicable Data Protection Laws in the Processing of Company Personal Data; and 3.1.2. not Process Company Personal Data other than on the relevant Company Group Member’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Vendor or the relevant Vendor Affiliate shall to the extent permitted by Applicable Laws inform the relevant Company Group Member of that legal requirement before the relevant Processing of that Personal Data.

Processing of Company Personal Data. 3.1. 3.1 Vendor and each Vendor Affiliate shall:shall:‌ 3.1.1. 3.1.1 comply with all applicable Data Protection Laws in the Processing of Company Personal Data; and 3.1.2. 3.1.2 not Process Company Personal Data other than on the relevant Company Group Member’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Vendor or the relevant Vendor Affiliate shall to the extent permitted by Applicable Laws inform the relevant Company Group Member of that legal requirement before the relevant Processing of that Personal Data.

Processing of Company Personal Data. 3.1. 3.1 Vendor and each Vendor Affiliate shall: 3.1.1. 3.1.1 comply with all applicable Data Protection Laws in the Processing of Company Personal DataData applicable to Vendor’s provision of Services under the Master Agreement; and 3.1.2. 3.1.2 not Process Company Personal Data other than pursuant to the Master Agreement, or on the relevant Company Group MemberCompany’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Vendor or the relevant Vendor Affiliate shall to the extent permitted by Applicable Laws inform the relevant Company Group Member of that legal requirement before the relevant Processing of that Personal Data.Laws 3.2 Company: 3.2.1 instructs Vendor (and authorises Vendor to instruct each Sub-processor) to:

Processing of Company Personal Data. 3.1. 3.1 Vendor and each Vendor Affiliate shall: 3.1.1. 3.1.1 comply with all applicable Data Protection Laws in the Processing of Company Personal Data; and 3.1.2. 3.1.2 not Process Company Personal Data other than on the relevant Company Group Member’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Vendor or the relevant Vendor Affiliate shall to the extent permitted by Applicable Laws inform the relevant Company Group Member of that legal requirement before the relevant Processing of that Personal Data.

Processing of Company Personal Data. 3.1. 2.1 Vendor and each Vendor Affiliate shall: 3.1.1. 2.1.1 comply with all applicable Data Protection Laws in the Processing of Company Personal Data; and 3.1.2. 2.1.2 not Process Company Personal Data other than on the relevant Company Group Member’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Vendor or the relevant Vendor Affiliate shall to the extent permitted by Applicable Laws inform the relevant Company Group Member of that legal requirement before the relevant Processing of that Personal Data. 2.2 Each Company Group Member:

Processing of Company Personal Data. 3.1. 3.1 Vendor and each Vendor Affiliate shall: 3.1.1. comply 3.1.1 Comply with all applicable Data Protection Laws in the Processing of Company Personal Data; and 3.1.2. 3.1.2 Shall not Process Company Personal Data other than on the relevant Company Group Member’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Vendor or the relevant Vendor Affiliate shall to the extent permitted by Applicable Laws inform the relevant Company Group Member of that legal requirement before the relevant Processing of that Personal Data.