Sub-Processor’s obligations Sample Clauses
Sub-Processor’s obligations. 3.1. Sub-Processor commits to complying with the following obligations, including those defined in Annexes 1, 2 and 3 which are considered an integral part of this DSPA:
a) Sub-Processor will Process Client Personal Data only as necessary to provide the Service and subject to the Client’s written instructions, including as provided in the Agreement and this DSPA;
b) Sub-Processor will notify the Client in the event that it considers a specific written instruction that was received, to be in violation of the Applicable Data Protection Laws;
c) Sub-Processor will notify the Client without undue delay of any contact, communication or correspondence it may receive from a Supervisory Authority, related to the Processing of Client Personal Data;
d) Sub-Processor has implemented adequate operational, technical and organisational measures under Art. 32 GDPR to protect the Client Personal Data. The Parties are aware and agree that the Sub-Processor is expressly authorized to implement alternative measures or to establish alternative places of data retention provided the level of security of the measures or places chosen is considered, in all respects, adequate;
e) In the event that the Sub-Processor discloses Client Personal Data to its personnel which is directly and exclusively involved in the provision of the Service, Sub-Processor will ensure that such personnel:
i) is committed to confidentiality or is under an appropriate statutory obligation of confidentiality; and
ii) Processes Client Personal Data under the instructions of Sub-Processor, and in compliance with Sub-Processor’s obligations under this DSPA.
Sub-Processor’s obligations. 2.1 With regard to the processing referred to in Article 1, Sub−Processor will ensure compliance with the requirements imposed by the GDPR on the processing of personal data.
2.2 Sub−Processor will inform the Processor, upon request, about the measures it has taken concerning its obligations under this Sub−Processor Agreement and the GDPR.
2.3 The obligations of the Sub−Processor arising from this Sub−Processor Agreement also apply to those who process personal data under the authority or on behalf of the Sub−Processor, including but not limited to employees, in the broadest sense of the word.
2.4 Sub−Processor indemnifies the Processor against any claims and legal actions from third parties, including supervisory authorities such as the Dutch Data Protection Authority and Data Subjects, based on or arising from a breach of the Dutch Data Protection Act, the GDPR, and/or this Sub− Processor Agreement.
2.5 Sub−Processor will immediately notify the Processor if it believes that an instruction from the Processor or Controller conflicts with the laws referred to in paragraph 1.
Sub-Processor’s obligations. 3.1. Sub-Processor commits to complying with the following obligations, including those defined in Annexes 1, 2 and 3 which are considered an integral part of this DSPA:
Sub-Processor’s obligations. In all cases where Eventix engages a Sub-processor, it will conclude a written agreement with this Sub-processor, which stipulates at least that:
(a) the Sub-processor must comply with the same obligations regarding data protection as set out in this Agreement by Eventix, in particular the obligation to provide adequate guarantees regarding the application of appropriate technical and organisational measures, to ensure that the Processing complies with the provisions of the GDPR;
(b) if the engaged Sub-contractor fails to fulfil his data protection obligations, Eventix remains fully liable to the Controller for the fulfilment of the obligations of the Sub-processor;
(c) after the end of the Agreement, the Sub-processor will permanently delete the Personal data he has in his possession as a result of Processing Personal Data that is the subject of the Agreement, or will return this data to the Eventix or the Organiser, such to be determined by the Organiser.
Sub-Processor’s obligations. Everlaw will: (A) enter into a written agreement with each Sub-processor containing terms that provide at least the same level of protection for Customer Data as those contained in this DPA, to the extent applicable to the nature of the services provided by such Sub-processor; and (B) remain responsible for all obligations sub-contracted and for any acts or omissions of the Sub-processor.
Sub-Processor’s obligations. 2.1. Wonderkind’s obligations arising under the terms of this Data Processing Addendum apply also to whoever processes personal data under Wonderkind ‘s instructions.
2.2. Wonderkind shall, on request, promptly supply Partner with details regarding the measures it has adopted to comply with its obligations under this Data Processing Addendum and the GDPR.
Sub-Processor’s obligations. Jumplead shall:
(i) enter into a written agreement with the Sub-Processor imposing terms that require the Sub-Processor to protect the Customer Data to the standards required by the applicable Data Protection Laws, including the requirement for the Sub-Processor not to process any Customer Data except on the Customer's documented, lawful instructions; and
(ii) be and remain responsible for its compliance with the obligations contained within this DPA and for any acts or omissions of the Sub-Processor that may cause Jumplead to breach any of its obligations under this DPA.
Sub-Processor’s obligations. 4.1 The Sub-Processor undertakes to process the Personal Data in compliance with the Regulation and applicable data protection laws and regulations which, by signing this Agreement, it declares it is familiar with. The Contractor undertakes to process the Personal Data only if required for the proper fulfilment of the obligations under the General Conditions and, in any case, in compliance with the Main Processor’s instructions. These instructions, which include those set out under this Agreement and the General Conditions, may be subsequently supplemented and notified using the Parties’ contact details.
4.2 The Sub-Processor undertakes to implement, within its sphere of responsibility, appropriate and adequate measures to ensure that the Processing meets the requirements of the Regulation, the fundamental principles under art. 5 and the Main Processor’s instructions.
4.3 The Sub-Processor undertakes to immediately inform the Main Processor in writing whenever it believes that any specific instructions it has received from the Main Processor are in breach of the Regulation. In these cases, before the instruction that is potentially in conflict with Regulation provisions is actually carried out by the Contractor, the Parties undertake to cooperate in good faith in order to ensure full compliance with applicable Personal Data protection regulations and to secure the guarantees envisaged for Data Subjects.
4.4 The Sub-Processor undertakes to immediately inform the Main Processor in writing of any contact, communication or correspondence received from a Supervisory Authority in relation to the Processing of Personal Data carried out in performance of the Agreement and the instruction of the Main Processor. The Sub-Processor is prohibited from responding to these contacts, communications or correspondence without the prior specific written authorisation of the Main Processor.
4.5 Taking into account the nature of the Processing and the information available, the Sub-Processor shall assist the Main Processor in carrying out Data Protection Impact Assessments and in consulting the Supervisory Authority prior to processing where this is requested by the Controller in accordance with articles 35 and 36 of the Regulation.
4.6 Where applicable, the Sub-Processor shall appoint System Administrators, providing them with specific instructions and explicitly specifying the areas and tasks assigned to them in compliance with applicable regulations and with the application...
Sub-Processor’s obligations. Where Proxyclick engages a sub-processor for carrying out specific Processing activities on behalf of the Client, the same data protection obligations as set out in this DPA shall be imposed on that sub-processor by way of a contract, in particular providing sufficient guarantees to implement appropriate technical and organizational measures in such a manner that the Processing will meet the requirements of Data Protection Legislation. Where the sub-processor fails to fulfil its data protection obligations, Proxyclick shall remain liable for the acts and omissions of its sub-processor.