RECORDS, INFORMATION AND AUDIT. 7.1. Vendor shall make available to Company on request in a timely manner and in any event within 3 working days copies of complete, accurate and up to date written records of all categories of Processing activities carried out on behalf of Company, containing such information as Company reasonably requires to demonstrate Vendor’s and Company’s compliance with their respective obligations under applicable data protection laws and this DPA. 7.2. Vendor shall upon reasonable notice and at no cost to Company allow for and contribute to audits, for the purpose of demonstrating compliance by Vendor and Company with their respective obligations under applicable data protection laws and under this DPA. Especially, Vendor shall provide and procure reasonable access (where practicable, during normal business hours) to information, documentation, facilities, equipment, premises and sites relating to Company Personal Data and/or the records referred to in clause 7.1, and to Vendor Personnel. 7.3. Vendor shall promptly resolve, at its own cost and expense, all data protection and security issues discovered by Company and reported to Vendor that reveal a breach or potential breach by Vendor of its obligations under this DPA. 7.4. If Vendor is in breach of its obligations under this DPA, Company may suspend the transfer of Company Personal Data to Vendor until the breach is remedied. 7.5. Company shall be entitled to share any notification, details, records or information provided by or on behalf of Vendor under this DPA with Company, its professional advisors and/or the Supervisory Authority.
Appears in 2 contracts
Samples: Data Processing Addendum, Data Processing Agreement
RECORDS, INFORMATION AND AUDIT. 7.1. Vendor shall make available to Company on request in a timely manner and in any event within 3 working days copies of complete, accurate and up to date written records of all categories of Processing activities carried out on behalf of Company, containing such information as Company reasonably requires to demonstrate Vendor’s and Company’s compliance with their respective obligations under applicable data protection laws and this DPA.
7.2. Vendor shall upon reasonable notice and at no cost to Company allow for and contribute to audits, for the purpose of demonstrating compliance by Vendor and Company with their respective obligations under applicable data protection laws and under this DPA. Especially, Vendor shall provide and procure reasonable access (where practicable, during normal business hours) to information, documentation, facilities, equipment, premises and sites relating to Company Personal Data and/or the records referred to in clause 7.1, and to Vendor Personnel.
7.3. Vendor shall promptly resolve, at its own cost and expense, all data protection and security issues discovered by Company and reported to Vendor that reveal a breach or potential breach by Vendor of its obligations under this DPA.
7.4. If Vendor is in breach of its obligations under this DPA, Company may suspend the transfer of Company Personal Data to Vendor until the breach is remedied.
7.5. Company shall be entitled to share any notification, details, records or information provided by or on behalf of Vendor under this DPA with Company, its professional advisors and/or the Supervisory Authority.
Appears in 2 contracts