Common use of Protection of Subscriber Data Clause in Contracts

Protection of Subscriber Data. Company shall maintain commercially reasonable administrative, physical, and technical safeguards for protection of the security, unauthorized access or disclosure of Subscriber Data. All data and information provided by Subscriber through its use of the Service is subject to Company’s Privacy Policy, which can be viewed by clicking the “Privacy” hypertext link located within the Service. By using the Service, Subscriber accepts and agrees to be bound and abide by such Privacy Policy. At all times during the Subscription term and upon written request of Subscriber within thirty (30) days after the effective date of termination or expiration of this Agreement, Subscriber data shall be available for Subscriber’s export and download. Following the thirty (30) days after termination or expiration, Company shall not be obligated to maintain Subscriber Data and may delete or destroy what remains in its possession or control unless prohibited by law. (a) If applicable in the United States, if Subscriber is a “Covered Entity” under the Health Insurance Portability and Accountability Act of 1996 (as amended from time to time, “HIPAA”), and if Subscriber must reasonably provide protected health information as defined by HIPAA in order to use the Services, Company shall be Subscriber’s “Business Associate” under HIPAA, and Company and Subscriber shall enter into a Business Associate Agreement (the form of which shall be reasonably satisfactory to Company). (b) If applicable in the United Kingdom, Switzerland or European Economic Area (EEA), both parties will comply with the applicable requirements of Data Protection Legislation. “Data Protection Legislation” means (i) the United Kingdom’s Data Protection Xxx 0000, and (ii) the General Data Protection Regulation (“GDPR”) and any national implementing laws, regulations or secondary legislation. Company and Subscriber agree that Company will not be processing any personal data on behalf of the Subscriber as “Data Controller” (defined in accordance with the Data Protection Legislation). Company will collect, use, disclose, transfer and store personal information when needed to administer this Agreement and for its operational and business purposes, in accordance with Data Protection Legislation. To the extent personal data from the UK, Switzerland or the EEA are processed by Company, the terms of a data processing addendum (“DPA”) must be signed by the parties. To the extent Company processes personal data, its binding corporate rules and the standard contract clauses shall apply, as set forth in the DPA. For standard contract clauses, Subscriber and Company agree that Subscriber is the data exporter and Subscriber’s acceptance of this Agreement or applicable Order Form shall be treated as its execution of the standard contract clauses.

Protection of Subscriber Data. Company DSI shall maintain commercially reasonable administrative, physical, and technical safeguards for protection of the security, unauthorized access or disclosure of Subscriber Data. All data and information provided by Subscriber through its use of the Service is subject to CompanyDSI’s Privacy Policy, which can be viewed by clicking the “Privacy” hypertext link located within the Service. By using the Service, Subscriber accepts and agrees to be bound and abide by such Privacy Policy. At all times during the Subscription term and upon written request of Subscriber within thirty (30) days after the effective date of termination or expiration of this Agreement, Subscriber data shall be available for Subscriber’s export and download. Following the thirty (30) days after termination or expiration, Company DSI shall not be obligated to maintain Subscriber Data and may delete or destroy what remains in its possession or control unless prohibited by law. (a) If applicable in the United States, if Subscriber is a “Covered Entity” under the Health Insurance Portability and Accountability Act of 1996 (as amended from time to time, “HIPAA”), and if Subscriber must reasonably provide protected health information as defined by HIPAA in order to use the Services, Company DSI shall be Subscriber’s “Business Associate” under HIPAA, and Company any Subscriber Data provided by Subscriber to DSI in their capacities as a Covered Entity and Business Associate, respectively, DSI and Subscriber shall enter into a Business Associate Agreement (the form of which shall be reasonably satisfactory to CompanyDSI). (b) If applicable in the United Kingdom, Switzerland or European Economic Area (EEA), both parties will comply with the applicable requirements of Data Protection Legislation. “Data Protection Legislation” means (i) the United Kingdom’s Data Protection Xxx 0000, and (ii) the General Data Protection Regulation (“GDPR”) and any national implementing laws, regulations or secondary legislation. Company DSI and Subscriber agree that Company DSI will not be processing any personal data on behalf of the Subscriber as “Data Controller” (defined in accordance with the Data Protection Legislation). Company DSI will collect, use, disclose, transfer and store personal information when needed to administer this Agreement and for its operational and business purposes, in accordance with Data Protection Legislation. To the extent personal data from the UK, Switzerland or the EEA are processed by CompanyDSI, the terms of a data processing addendum (“DPA”) must be signed by the parties. To the extent Company DSI processes personal data, its binding corporate rules and the standard contract clauses shall apply, as set forth in the DPA. For standard contract clauses, Subscriber and Company DSI agree that Subscriber is the data exporter and Subscriber’s acceptance of this Agreement or applicable Order Form shall be treated as its execution of the standard contract clauses.

Protection of Subscriber Data. Company shall maintain commercially reasonable administrative, physical, and technical safeguards for protection of the security, unauthorized access or disclosure of Subscriber Data. All data and information provided by Subscriber through its use of the Service is subject to Company’s Privacy Policy, which can be viewed by clicking the “Privacy” hypertext link located within the Service. By using the Service, Subscriber Xxxxxxxxxx accepts and agrees to be bound and abide by such Privacy Policy. At all times during the Subscription term and upon written request of Subscriber within thirty (30) days after the effective date of termination or expiration of this Agreement, Subscriber data shall be available for Subscriber’s export and download. Following the thirty (30) days after termination or expiration, Company shall not be obligated to maintain Subscriber Data and may delete or destroy what remains in its possession or control unless prohibited by law. (a) If applicable in the United States, if Subscriber is a “Covered Entity” under the Health Insurance Portability and Accountability Act of 1996 (as amended from time to time, “HIPAA”), and if Subscriber must reasonably provide protected health information as defined by HIPAA in order to use the Services, Company shall be Subscriber’s “Business Associate” under HIPAA, and Company and Subscriber shall enter into a Business Associate Agreement (the form of which shall be reasonably satisfactory to Company).. DRAFT COPY (b) If applicable in the United Kingdom, Switzerland or European Economic Area (EEA), both parties will comply with the applicable requirements of Data Protection Legislation. “Data Protection Legislation” means (i) the United Kingdom’s Data Protection Xxx 0000Act 2018, and (ii) the General Data Protection Regulation (“GDPR”) and any national implementing laws, regulations or secondary legislation. Company and Subscriber agree that Company will not be processing any personal data on behalf of the Subscriber as “Data Controller” (defined in accordance with the Data Protection Legislation). Company will collect, use, disclose, transfer and store personal information when needed to administer this Agreement and for its operational and business purposes, in accordance with Data Protection Legislation. To the extent personal data from the UK, Switzerland or the EEA are processed by Company, the terms of a data processing addendum (“DPA”) must be signed by the parties. To the extent Company processes personal data, its binding corporate rules and the standard contract clauses shall apply, as set forth in the DPA. For standard contract clauses, Subscriber and Company agree that Subscriber is the data exporter and Subscriber’s acceptance of this Agreement or applicable Order Form shall be treated as its execution of the standard contract clauses.

Protection of Subscriber Data. Company shall maintain commercially reasonable administrative, physical, and technical safeguards for protection of the security, unauthorized access or disclosure of Subscriber Data. All data and information provided by Subscriber through its use of the Service is subject to Company’s Privacy Policy, which can be viewed by clicking the “Privacy” hypertext link located within the Service. By using the Service, Subscriber Xxxxxxxxxx accepts and agrees to be bound and abide by such Privacy Policy. At all times during the Subscription term and upon written request of Subscriber within thirty (30) days after the effective date of termination or expiration of this Agreement, Subscriber data shall be available for Subscriber’s export and download. Following the thirty (30) days after termination or expiration, Company shall not be obligated to maintain Subscriber Data and may delete or destroy what remains in its possession or control unless prohibited by law. (a) If applicable in the United States, if Subscriber is a “Covered Entity” under the Health Insurance Portability and Accountability Act of 1996 (as amended from time to time, “HIPAA”), and if Subscriber must reasonably provide protected health information as defined by HIPAA in order to use the Services, Company shall be Subscriber’s “Business Associate” under HIPAA, and Company and Subscriber shall enter into a Business Associate Agreement (the form of which shall be reasonably satisfactory to Company). (b) If applicable in the United Kingdom, Switzerland or European Economic Area (EEA), both parties will comply with the applicable requirements of Data Protection Legislation. “Data Protection Legislation” means (i) the United Kingdom’s Data Protection Xxx 0000Act 2018, and (ii) the General Data Protection Regulation (“GDPR”) and any national implementing laws, regulations or secondary legislation. Company and Subscriber agree that Company will not be processing any personal data on behalf of the Subscriber as “Data Controller” (defined in accordance with the Data Protection Legislation). Company will collect, use, disclose, transfer and store personal information when needed to administer this Agreement and for its operational and business purposes, in accordance with Data Protection Legislation. To the extent personal data from the UK, Switzerland or the EEA are processed by Company, the terms of a data processing addendum (“DPA”) must be signed by the parties. To the extent Company processes personal data, its binding corporate rules and the standard contract clauses shall apply, as set forth in the DPA. For standard contract clauses, Subscriber and Company agree that Subscriber is the data exporter and Subscriber’s acceptance of this Agreement or applicable Order Form shall be treated as its execution of the standard contract clauses.