Common use of PROCESSING OF THE PERSONAL DATA Clause in Contracts

PROCESSING OF THE PERSONAL DATA. 2.1 Processor shall only process the types of Personal Data relating to the categories of data subjects for the purposes of the Principal Agreement and for the specific purposes in each case as set out in Annex 1 (Details of Processing of Personal Data) to this Agreement and shall not process, transfer, modify, amend or alter the Personal Data or disclose or permit the disclosure of the Personal Data to any third party other than in accordance with the Controller's documented instructions (whether in the Principal Agreement or otherwise) unless processing is required by EU or Member State law to which Processor is subject, in which case Processor shall to the extent permitted by such law inform the Controller of that legal requirement before processing that Personal Data.‌ 2.2 For the purposes set out in section 2.1. above, the Controller hereby instructs Processor to transfer Personal Data to the recipients in the countries listed in Annex 3 (Authorised Transfers of Personal Data) always provided that Processor shall comply with section 5 (Subprocessing) and 11 (International Transfers of Personal Data). 2.3 Parties agree that this Agreement amends and replaces: (i) the provisions in the Principal Agreement that relate expressly to the parties’ use of Personal Data, including any specific data protection clauses and data protection schedules in engagement letters; and (ii) any other provisions in the Agreement that conflict with the terms of this Agreement.

PROCESSING OF THE PERSONAL DATA. 2.1 Processor shall only process the types of Personal Data relating to the categories of data subjects for the purposes of the Principal Agreement and for the specific purposes in each case as set out in Annex 1 (Details of Processing of Personal Data) to this Agreement and shall not process, transfer, modify, amend or alter the Personal Data or disclose or permit the disclosure of the Personal Data to any third party other than in accordance with the Controller's documented instructions (whether in the Principal Agreement or otherwise) unless processing is required by EU or Member State law to which Processor is subject, in which case Processor shall to the extent permitted by such law inform the Controller of that legal requirement before processing that Personal Data.‌Data. 2.2 For the purposes set out in section 2.1. above, the Controller hereby instructs Processor to transfer Personal Data to the recipients in the countries listed in Annex 3 (Authorised Transfers of Personal Data) always provided that Processor shall comply with section 5 (Subprocessing) and 11 (International Transfers of Personal Data). 2.3 Parties agree that this Agreement amends and replaces: (i) the provisions in the Principal Agreement that relate expressly to the parties’ use of Personal Data, including any specific data protection clauses and data protection schedules in engagement letters; and (ii) any other provisions in the Agreement that conflict with the terms of this Agreement.