Supplier Obligations (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied employees and representatives.
(b) Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein.
(c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure.
(d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties.
(e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order.
(f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal.
(g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership.
(h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation.
(i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Order.
