Common use of Supplier Obligations Clause in Contracts

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied employees and representatives. (b) Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) 2.1 Deliverables Supplier shall agrees to supply, and Xxxxx NZT agrees to acquire, the Deliverables subject to and in accordance with the terms of the Agreement. 2.2 Performance standards Supplier will perform its obligations under the Agreement in a timely manner and in accordance with Good Industry Practice. 2.3 Laws, licences and approvals In carrying out its activities in connection with this Agreement, Supplier will comply with all applicable Laws and will not access (commit any act or omit to do anything that causes or has the potential to cause Spark NZT to breach any Laws. Supplier will have all the licences, consents and approvals needed to supply the Deliverables and perform and observe its other obligations in accordance with the Agreement. 2.4 Requirements Supplier will provide the Deliverables to Spark NZT free of Defects and in accordance with all applicable Requirements, Service Levels and timeframes for delivery set out in a Side Letter or PO. 2.5 Co-operation Supplier will co-operate in good faith and in a timely manner with other Spark NZT suppliers, and if reasonably requested by Spark NZT, will provide information and assistance as necessary to facilitate the supply of goods or services to Spark NZT by those suppliers. A breach of this clause will be deemed a material breach of the Agreement. 2.6 Policies Supplier will use its best endeavours to follow Spark NZT’s applicable policies as provided to Supplier in writing from time to time, and a persistent or material breach of any of those policies will constitute a material breach of the Agreement. Supplier will advise Spark NZT immediately that it becomes aware that it has breached or is likely to have breached any of Spark NZT’s policies including remote access)if Spark NZT’s security has been compromised. 2.7 Key Personnel Supplier will assign the Key Personnel to the corresponding roles specified in the Agreement, copyand will not re-assign those Key Personnel without Spark NZT’s prior written consent, use or other process any Personal Information not to be less than expressly necessary for the provision of the services subject to this Purchase Orderunreasonably withheld or delayed. 2.8 Documentation Accompanying each Deliverable, Supplier will provide Spark NZT with corresponding Documentation. Supplier will ensure that the Documentation includes a complete set of operating, technical and user manuals with a level of specificity to enable a reasonably competent user to make effective use of each Deliverable. If Spark NZT discovers any error in the Documentation, Spark NZT may notify Supplier that all its obligations in writing of the error and Supplier will promptly correct it and provide Spark NZT with amended Documentation at no additional cost to Spark NZT. Spark NZT may copy Documentation as reasonably necessary to enable Spark NZT to enjoy the benefit of the Deliverables in accordance with the Agreement. 2.9 Information Supplier will prepare, and retain during the term of the Agreement and for a reasonable period afterwards, accurate records and accounts in relation to all material aspects of its activities under the processing Agreement, including the Charges and Deliverables, in each case to a level of Personal Information by force of this Purchase Order are applied employees detail, completeness and representatives. (b) Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions accuracy consistent with Good Industry Practice and will process such data exclusively for the purposes set out any relevant terms in this Purchase Order and in the form necessary for the implementation of the services contracted hereinAgreement. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Supplier shall not access comply with all Owner requirements, as applicable, as to electronic data exchange. Supplier shall comply with Owner’s IT Requirements, which are located on the Supplier Portal and as may be amended from time to time. (including remote access)i) Even in the absence of electronic signatures, copythe parties agree that the orders, use decisions and commitments communicated by them over the EDI system shall be binding and shall be considered legally valid. Offers and acceptances submitted electronically via the EDI system shall be legally binding upon the Supplier. Decisions and commitments communicated by one of the Supplier’s registered users shall constitute binding confirmation of the acceptance of orders or other process any Personal Information sales agreements. The Supplier shall only grant employees and agents entitled to be less than expressly necessary submit legally binding declarations of intent authorized status to make those declarations via the EDI system. The user IDs and passwords created for the provision EDI system shall only be accessible to Supplier’s agents and employees who are able to submit declarations of intent, offers and acceptances that are legally binding on Supplier. Supplier shall, and shall cause its employees and agents to keep such IDs and passwords confidential. In the event that Supplier terminates its relationship with an employee or agent who has knowledge of such an ID or password, Supplier shall immediately terminate that ID and/or password. (ii) Every process communicated via the EDI system, and particularly, offers acceptances and communications regarding the Goods shall be recorded and stored along with the identification of the services subject to this Purchase Orderuser creating it. Supplier will ensure This record shall be used exclusively as evidence of the content and the fact that the Supplier that all its obligations in relation to the processing a party submitted a legally binding offer, acceptance or declaration of Personal Information by force of this Purchase Order are applied employees and representativesintent. (b) Supplier shall process adhere to and comply with the Data from the Novartis on your behalf only through the novartis' express instructions Steel Offload Process Implementation Guide which is attached hereto as Attachment 1, and will process such data exclusively for the purposes set out in this Purchase Order any amendments and updates thereto. When required by Owner in the form necessary for Steel Offload Process Implementation Guide or otherwise, Supplier shall use this EDI system as the implementation means of the services contracted hereincommunication under this Agreement. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase orderSupplier shall comply with all Owner requirements, due as applicable, as to the request for competent authoritysecurity of Owner’s data and information. Supplier shall comply with the Information Security Requirements, it shall communicate immediately which are located on the Supplier Portal and as may be amended from time to Novartis on this request and always get your consent to any disclosuretime. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish comply with the subcontractor a written agreement by assigning to standards and requirements of Owner regarding social responsibility, compliance, sustainability and environmental protection as specified in both the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment latest versions of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) MBST 36, and (ii) Mercedes’ Responsible Sourcing Standards, located on the Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising Portal and as either may be amended from the non-compliance obligations assumed under this Purchase Order related time to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Ordertime.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than unless it is expressly necessary for the provision of the services subject to this Purchase Order. Supplier Supplier, its employees and representatives, will ensure that the Supplier that comply with all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied employees and representativesInformation. (b) Supplier shall process the Data from the Novartis on your their behalf only through the novartisNovartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier Supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase orderPurchase Order, due to the request for of competent authority, it shall communicate immediately to Novartis on this request and always get your its consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have it has had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a assigns in written agreement by assigning to the subcontractor all the rights and obligations assigned to it, under included this Purchase Order. No notwithstanding Notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Novartis’ Data against any change, use and disclosure not accidental disclosure, loss or destruction or illegaldestruction. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier Supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownershipOrder. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy failure of Novartis Data and/or Personal Information and supplier Supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis Novartis’ Data and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Per- xxxxx Information by force of this Purchase Order are applied to its employees and representatives.represent- atives according to the applicable laws (b) Supplier shall process the Data from the Novartis Sandoz on your behalf only through the novartisSandoz' express ex- press instructions and will process such data exclusively for the purposes set out in this Purchase Pur- chase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis Xxxxxx obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis Sandoz on this request and always get your consent to any disclosuredis- closure. (d) Supplier shall ensure strict confidentiality of Novartis Sandoz Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the NovartisSandoz. Novartis Xxxxxx will authorize au- thorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase OrderOr- der. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis Sandoz and/or Personal Information to which have access, equivalent to those imposed on the NovartisSandoz, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Sandoz Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis Sandoz request or at the end of this Purchase Order, destroy or return to Novartis Sandoz all Personal Information and/or Personal Data of Novartis Sandoz collected, stored and processed pro- cessed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information NovartisSandoz' ownership. (h) Supplier shall inform Novartis immediately Xxxxxx immediately, within 24 (twenty-four) hours, about any breakage or failure security or privacy of Novartis Sandoz Data and/or Personal Information and supplier must cooperate with Novartis Sandoz in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis Sandoz for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing pro- cessing of data Novartis Sandoz and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) a. Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. The Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Information In- formation by force of this Purchase Order are applied employees and representatives. (b) b. Supplier shall process the Data from the Novartis Sandoz on your behalf only through the novartisSandoz' express instructions instruc- tions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) c. Where supplier the Supplier is obliged to disclose any Personal Information and/or Personal Information Novartis Xxxxxx obtained under this purchase order, due to the request for competent authority, it shall communicate immediately im- mediately to Novartis Sandoz on this request and always get your consent to any disclosure. (d) d. Supplier shall ensure strict confidentiality of Novartis Sandoz Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) e. Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the NovartisSandoz. Novartis Xxxxxx will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractorsubcon- tractor, under this Purchase Order. (f) f. Supplier shall comply with all obligations relating to the Data Security of the Novartis Sandoz and/or Personal Information to which have access, equivalent to those imposed on the NovartisSandoz, and shall adopt and implement imple- ment all technical and organizational measures to adequately protect Novartis Sandoz Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) g. Supplier shall, upon Novartis Sandoz request or at the end of this Purchase Order, destroy or return to Novartis Sandoz all Personal Information and/or Personal Data of Novartis Sandoz collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information NovartisSandoz' ownership. (h) h. Supplier shall inform Novartis Xxxxxx immediately about any breakage or failure security or privacy of Novartis Sandoz Data and/or Personal Information and supplier must cooperate with Novartis Sandoz in the solution of such failures, including data recovery or any other form of remediation. (i) i. Supplier shall indemnify Novartis Sandoz for any loss, damage, or complaint arising out of or arising from the non-non- compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis Sandoz and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied to its employees and representatives.representatives according to the applicable laws (b) Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately immediately, within 24 (twenty-four) hours, about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Goods shall be new and unused and shall be designed and manufactured in accordance with the Contract. Where no standards or codes of practice are specified in the Contract, Goods shall conform to accepted industry codes and standards. The Services shall be executed and completed in a professional and workmanlike manner with due diligence and strictly in accordance with all requirements of the Contract. The Supplier shall not access (including remote access)bear without limitation the cost and expense of replacing, copycorrecting or redoing, use or other process with due diligence and all expediency, any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase OrderGoods or Services which are defective, incorrect and or/ not in accordance with the requirements of the Contract. The Supplier shall provide suitably qualified, competent, skilled, trained and technically experienced personnel. Supplier will shall ensure that the Supplier necessary personnel are available at the designated Worksite and properly equipped when required by Buyer for commencement of the Services and that all its obligations in relation to said personnel shall continuously be available for the processing duration of Personal Information by force of this Purchase Order are applied employees and representatives. (b) the Services. At the Buyer’s request, the Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation provide evidence of the services contracted herein. (c) Where supplier is obliged qualifications and experience of its personnel. The Buyer reserves the right, in its sole discretion, to disclose reject any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to person employed by the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during in connection with the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties Work. In the rights and obligations assumed through this Purchase Order without the prior written consent event of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor such a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoingrejection, the Supplier will remain fully responsible for shall procure a replacement resource without delay and at no cost or expense to the fulfillment of its obligations and Buyer. While on the subcontractorWorksite, under this Purchase Order. (f) Supplier shall comply with the policies and procedures of Buyer. Failure to do so shall result in Supplier being obligated to reimburse Buyer for all obligations relating to costs and expenses incurred by Buyer as a result of such failure. Supplier’s equipment utilized in the Data Security rendering of the Novartis and/or Personal Information Services shall be suitable for the safe and efficient performance of the Work. Any such equipment which is found to which have access, equivalent be in an unsafe condition or subject to those imposed on the Novartisrepeated breakdown or not in full conformance with current and applicable laws and regulations, and Buyer’s standards, shall adopt be promptly removed from the Worksite and implement all technical replaced or repaired without additional cost to Buyer and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed without delay in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution completion of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Work. Supplier shall inform Novartis immediately about any breakage or failure security or privacy provide, where required, custom clearances for Supplier’s equipment required for successful completion of Novartis Data and/or Personal Information and supplier must cooperate the Work, with Novartis in assistance from Buyer for the solution of such failures, including data recovery or any other form of remediation. (i) necessary recommendation letters if so required. Supplier shall indemnify Novartis obtain all permits, licenses and other governmental authorizations, which are necessary for any lossthe performance of the Work, damage, or complaint arising out with the exception of or arising those which must be obtained by the Buyer in its own name. No deviation from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase OrderContract shall be made without Xxxxx’s prior written authorisation.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than unless it is expressly necessary for the provision of the services subject to this Purchase Order. Supplier Supplier, its employees and representatives, will ensure that the Supplier that comply with all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied employees and representativesInformation. (b) Supplier shall process the Data from the Novartis Sandoz on your their behalf only through the novartisSandoz' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier Supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase orderPurchase Order, due to the request for of competent authority, it shall communicate immediately to Novartis Sandoz on this request and always get your its consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Sandoz Data and/or Personal Information to which you have it has had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the NovartisSandoz. Novartis Xxxxxx will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a assigns in written agreement by assigning to the subcontractor all the rights and obligations assigned to it, under included this Purchase Order. No notwithstanding Notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis Sandoz and/or Personal Information Infor- mation to which have access, equivalent to those imposed on the NovartisSandoz, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Xxxxxx’ Data against any change, use and disclosure not accidental disclosure, loss or destruction or illegaldestruction. (g) Supplier shall, upon Novartis Sandoz request or at the end of this Purchase Order, destroy or return to Novartis Sandoz all Personal Information and/or Personal Data of Novartis Sandoz collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier Supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownershipOrder. (h) Supplier shall inform Novartis Xxxxxx immediately about any breakage or failure security or privacy failure of Novartis Sandoz Data and/or Personal Information and supplier Supplier must cooperate with Novartis Sandoz in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis Sandoz for any loss, damage, or complaint arising out of or arising from the non-non- compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis Sandoz’ Data and/or Personal Information related to this Purchase Order.