Common use of Processing of Customer Personal Data Clause in Contracts

Processing of Customer Personal Data. 2.1 SentinelOne shall: 2.1.1 comply with all applicable Data Protection Laws in the Processing of Customer Personal Data; and 2.1.2 not Process Customer Personal Data other than for the purpose described in Annex 1 to this Addendum, unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case SentinelOne or the relevant SentinelOne Affiliate shall to the extent permitted by Applicable Laws inform the Customer of that legal requirement before the relevant Processing of that Personal Data. 2.2 Customer hereby: 2.2.1 instructs SentinelOne (and authorizes SentinelOne to instruct each Subprocessor) to: 2.2.1.1 Process Customer Personal Data; and 2.2.1.2 in particular, transfer Customer Personal Data to any country or territory, as reasonably necessary for the provision of the Solutions and consistent with the Agreement; and 2.2.2 warrants and represents that it is and will at all relevant times remain duly and effectively authorised to give the instruction set out in section 2.2.1 on behalf of each relevant Customer Affiliate. 2.3 Annex 1 to this Addendum sets out certain information regarding the Contracted Processors' Processing of the Customer Personal Data as required by article 28(3) of the GDPR (and, possibly, equivalent requirements of other Data Protection Laws). Customer may make reasonable amendments to Annex 1 by written notice to SentinelOne from time to time as Customer reasonably considers necessary to meet those requirements. Nothing in Annex 1 (including as amended pursuant to this section 2.3) confers any right or imposes any obligation on any party to this Addendum.