Common use of Supplier Obligations Clause in Contracts

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied employees and representatives. (b) Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Supplier shall not access comply with all Owner requirements, as applicable, as to electronic data exchange. Supplier shall comply with Owner’s IT Requirements, which are located on the Supplier Portal and as may be amended from time to time. (including remote access)i) Even in the absence of electronic signatures, copythe parties agree that the orders, use decisions and commitments communicated by them over the EDI system shall be binding and shall be considered legally valid. Offers and acceptances submitted electronically via the EDI system shall be legally binding upon the Supplier. Decisions and commitments communicated by one of the Supplier’s registered users shall constitute binding confirmation of the acceptance of orders or other process any Personal Information sales agreements. The Supplier shall only grant employees and agents entitled to be less than expressly necessary submit legally binding declarations of intent authorized status to make those declarations via the EDI system. The user IDs and passwords created for the provision EDI system shall only be accessible to Supplier’s agents and employees who are able to submit declarations of intent, offers and acceptances that are legally binding on Supplier. Supplier shall, and shall cause its employees and agents to keep such IDs and passwords confidential. In the event that Supplier terminates its relationship with an employee or agent who has knowledge of such an ID or password, Supplier shall immediately terminate that ID and/or password. (ii) Every process communicated via the EDI system, and particularly, offers acceptances and communications regarding the Goods shall be recorded and stored along with the identification of the services subject to this Purchase Orderuser creating it. Supplier will ensure This record shall be used exclusively as evidence of the content and the fact that the Supplier that all its obligations in relation to the processing a party submitted a legally binding offer, acceptance or declaration of Personal Information by force of this Purchase Order are applied employees and representativesintent. (b) Supplier shall process adhere to and comply with the Data from the Novartis on your behalf only through the novartis' express instructions Steel Offload Process Implementation Guide which is attached hereto as Attachment 1, and will process such data exclusively for the purposes set out in this Purchase Order any amendments and updates thereto. When required by Owner in the form necessary for Steel Offload Process Implementation Guide or otherwise, Supplier shall use this EDI system as the implementation means of the services contracted hereincommunication under this Agreement. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase orderSupplier shall comply with all Owner requirements, due as applicable, as to the request for competent authoritysecurity of Owner’s data and information. Supplier shall comply with the Information Security Requirements, it shall communicate immediately which are located on the Supplier Portal and as may be amended from time to Novartis on this request and always get your consent to any disclosuretime. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish comply with the subcontractor a written agreement by assigning to standards and requirements of Owner regarding social responsibility, compliance, sustainability and environmental protection as specified in both the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment latest versions of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) MBST 36, and (ii) Mercedes’ Responsible Sourcing Standards, located on the Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising Portal and as either may be amended from the non-compliance obligations assumed under this Purchase Order related time to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Ordertime.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Per- xxxxx Information by force of this Purchase Order are applied to its employees and representatives.represent- atives according to the applicable laws (b) Supplier shall process the Data from the Novartis Sandoz on your behalf only through the novartisSandoz' express ex- press instructions and will process such data exclusively for the purposes set out in this Purchase Pur- chase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis Xxxxxx obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis Sandoz on this request and always get your consent to any disclosuredis- closure. (d) Supplier shall ensure strict confidentiality of Novartis Sandoz Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the NovartisSandoz. Novartis Xxxxxx will authorize au- thorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase OrderOr- der. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis Sandoz and/or Personal Information to which have access, equivalent to those imposed on the NovartisSandoz, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Sandoz Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis Sandoz request or at the end of this Purchase Order, destroy or return to Novartis Sandoz all Personal Information and/or Personal Data of Novartis Sandoz collected, stored and processed pro- cessed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information NovartisSandoz' ownership. (h) Supplier shall inform Novartis immediately Xxxxxx immediately, within 24 (twenty-four) hours, about any breakage or failure security or privacy of Novartis Sandoz Data and/or Personal Information and supplier must cooperate with Novartis Sandoz in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis Sandoz for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing pro- cessing of data Novartis Sandoz and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) a. Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. The Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Information In- formation by force of this Purchase Order are applied employees and representatives. (b) b. Supplier shall process the Data from the Novartis Sandoz on your behalf only through the novartisSandoz' express instructions instruc- tions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) c. Where supplier the Supplier is obliged to disclose any Personal Information and/or Personal Information Novartis Xxxxxx obtained under this purchase order, due to the request for competent authority, it shall communicate immediately im- mediately to Novartis Sandoz on this request and always get your consent to any disclosure. (d) d. Supplier shall ensure strict confidentiality of Novartis Sandoz Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) e. Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the NovartisSandoz. Novartis Xxxxxx will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractorsubcon- tractor, under this Purchase Order. (f) f. Supplier shall comply with all obligations relating to the Data Security of the Novartis Sandoz and/or Personal Information to which have access, equivalent to those imposed on the NovartisSandoz, and shall adopt and implement imple- ment all technical and organizational measures to adequately protect Novartis Sandoz Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) g. Supplier shall, upon Novartis Sandoz request or at the end of this Purchase Order, destroy or return to Novartis Sandoz all Personal Information and/or Personal Data of Novartis Sandoz collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information NovartisSandoz' ownership. (h) h. Supplier shall inform Novartis Xxxxxx immediately about any breakage or failure security or privacy of Novartis Sandoz Data and/or Personal Information and supplier must cooperate with Novartis Sandoz in the solution of such failures, including data recovery or any other form of remediation. (i) i. Supplier shall indemnify Novartis Sandoz for any loss, damage, or complaint arising out of or arising from the non-non- compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis Sandoz and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Goods shall be new and unused and shall be designed and manufactured in accordance with the Contract. Where no standards or codes of practice are specified in the Contract, Goods shall conform to accepted industry codes and standards. The Services shall be executed and completed in a professional and workmanlike manner with due diligence and strictly in accordance with all requirements of the Contract. The Supplier shall not access (including remote access)bear without limitation the cost and expense of replacing, copycorrecting or redoing, use or other process with due diligence and all expediency, any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase OrderGoods or Services which are defective, incorrect and or/ not in accordance with the requirements of the Contract. The Supplier shall provide suitably qualified, competent, skilled, trained and technically experienced personnel. Supplier will shall ensure that the Supplier necessary personnel are available at the designated Worksite and properly equipped when required by Buyer for commencement of the Services and that all its obligations in relation to said personnel shall continuously be available for the processing duration of Personal Information by force of this Purchase Order are applied employees and representatives. (b) the Services. At the Buyer’s request, the Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation provide evidence of the services contracted herein. (c) Where supplier is obliged qualifications and experience of its personnel. The Buyer reserves the right, in its sole discretion, to disclose reject any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to person employed by the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during in connection with the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties Work. In the rights and obligations assumed through this Purchase Order without the prior written consent event of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor such a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoingrejection, the Supplier will remain fully responsible for shall procure a replacement resource without delay and at no cost or expense to the fulfillment of its obligations and Buyer. While on the subcontractorWorksite, under this Purchase Order. (f) Supplier shall comply with the policies and procedures of Buyer. Failure to do so shall result in Supplier being obligated to reimburse Buyer for all obligations relating to costs and expenses incurred by Buyer as a result of such failure. Supplier’s equipment utilized in the Data Security rendering of the Novartis and/or Personal Information Services shall be suitable for the safe and efficient performance of the Work. Any such equipment which is found to which have access, equivalent be in an unsafe condition or subject to those imposed on the Novartisrepeated breakdown or not in full conformance with current and applicable laws and regulations, and Buyer’s standards, shall adopt be promptly removed from the Worksite and implement all technical replaced or repaired without additional cost to Buyer and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed without delay in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution completion of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Work. Supplier shall inform Novartis immediately about any breakage or failure security or privacy provide, where required, custom clearances for Supplier’s equipment required for successful completion of Novartis Data and/or Personal Information and supplier must cooperate the Work, with Novartis in assistance from Buyer for the solution of such failures, including data recovery or any other form of remediation. (i) necessary recommendation letters if so required. Supplier shall indemnify Novartis obtain all permits, licenses and other governmental authorizations, which are necessary for any lossthe performance of the Work, damage, or complaint arising out with the exception of or arising those which must be obtained by the Buyer in its own name. No deviation from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase OrderContract shall be made without Xxxxx’s prior written authorisation.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than expressly necessary for the provision of the services subject to this Purchase Order. Supplier will ensure that the Supplier that all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied to its employees and representatives.representatives according to the applicable laws (b) Supplier shall process the Data from the Novartis on your behalf only through the novartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase order, due to the request for competent authority, it shall communicate immediately to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately immediately, within 24 (twenty-four) hours, about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) The Supplier agrees to search, in the Territory, for Candidates who meet Wesleyan’s minimum qualifications and other criteria for Vacancies and as further detailed in any Job Description provided to the Supplier by Wesleyan from time to time. The Supplier will be sent details of Vacancies via the ATS. If the Supplier requires any further information in respect of a Vacancy they should contact the Resourcing Team as detailed on the ATS. The Supplier shall only take instructions from Wesleyan's Resourcing Team. The Supplier agrees that it shall not access (including remote access)provide any information about Candidates by any means, copyto any other department or staff of Wesleyan, use without the express prior written authorisation of a representative of Wesleyan's Resourcing Team. If the Supplier does not comply wholly with this Clause 4.3, Wesleyan shall not be liable to pay any fees relating to any appointment by Wesleyan arising from the unauthorised contact or other process referral. The Supplier should not advertise any Personal Information Vacancy in a manner which identifies Wesleyan as the prospective employer without first gaining the prior approval of Wesleyan's Resourcing Team. The Supplier agrees to be less than expressly necessary Screen all Candidates and Introduce to Wesleyan only Candidates who meet the minimum criteria for the provision position as communicated by Wesleyan. During the Priority Period the Preferred Supplier or Suppliers will have the exclusive right to source and Introduce appropriate Candidates for Vacancies, at the same time the role will be advertised internally and externally on our websites. If the Supplier does not anticipate being able to source sufficient appropriate Candidates for a Vacancy within the specified timescale it shall inform Wesleyan as soon as possible. Following expiry of the Priority Period, Wesleyan shall have the right (in its sole discretion) to seek services subject to this Purchase Orderin respect of a Vacancy from any other supplier. Supplier will ensure that This does not exclude the Supplier from continuing to search for and Introduce Candidates for that position. The Supplier warrants and represents to Wesleyan on an ongoing basis that: it will perform the Services with reasonable care and skill and in accordance with generally recognised commercial practices and standards in the industry for similar services; the Services will be provided in accordance with all its obligations Applicable Laws; the Services will be performed in relation such a way as not to cause any fault or malfunction in any systems or software of Wesleyan and so as not to cause any interruption to the processing business processes of Personal Information by force Wesleyan (other than any agreed and unavoidable interruption which is required in order to perform the Services in accordance with this Agreement); it will not introduce any viruses onto Wesleyan's systems while performing the Services; it has obtained and will maintain for the duration of this Purchase Order are applied employees Agreement all permissions, licences and representatives. (b) Supplier shall process consents necessary to perform the Data from Services; and it will comply with and meet at all times the Novartis on your behalf only through provisions and requirements of the novartis' express instructions and will process such data exclusively for the purposes Service Level Agreement set out in this Purchase Order Schedule 2. Wesleyan shall evaluate all Candidates Introduced by the Supplier and, if deemed suitable, the Candidate will commence Wesleyan’s recruitment process. Wesleyan will endeavour to feedback on the candidate information uploaded onto ATS within 48 hours of receipt. All interviews, tests and assessments in respect of Candidates will be arranged via the Supplier, and confirmed with the Wesleyan Resourcing Team in a timely manner. If the Supplier cannot reach the Candidate within 24 hours of request of interview they should notify Wesleyan, and continue to keep them informed. All candidates attending an interview will be required to take a completed Application Form. The Application Form will be sent out when the interview is confirmed with details of interview and directions to Wesleyan offices. The Supplier shall notify Wesleyan of any reasonable adjustments that need to be made at interview and in the form necessary for work place, in line with the implementation Disability Discrimination Act. Following an interview the Supplier should obtain prompt feedback from the Candidate, and relate this to the Resourcing Team on request. Wesleyan will not pay travel expenses of candidate attending interview. Exceptions may be considered but this is solely at the discretion of the services contracted herein. (c) Where supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase order, due Resourcing Team. The Supplier must obtain written agreement from the Resourcing Team prior to the interview, test or assessment as applicable. Confirmation that Wesleyan wishes to Engage a Candidate will be communicated to the Supplier via the Wesleyan Resourcing Team. All offers of Engagement must be communicated to a Candidate upon notification in accordance with Clause 5.6 regardless of any other opportunities the Candidate may be pursuing or whether the Supplier deems the offer of Engagement acceptable. Wesleyan reserves the right to make offers direct to Candidates for permanent positions, and the Supplier commits to providing telephone and contact address details upon request for competent authority, it shall communicate immediately (subject to Novartis on this request and always get your consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have had access during the execution permission of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third partiesCandidate). (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a written agreement by assigning to the subcontractor the rights and obligations assigned to it, under this Purchase Order. No notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Data against any change, use and disclosure not accidental loss or destruction or illegal. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownership. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy of Novartis Data and/or Personal Information and supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than unless it is expressly necessary for the provision of the services subject to this Purchase Order. Supplier Supplier, its employees and representatives, will ensure that the Supplier that comply with all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied employees and representativesInformation. (b) Supplier shall process the Data from the Novartis on your their behalf only through the novartisNovartis' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier Supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase orderPurchase Order, due to the request for of competent authority, it shall communicate immediately to Novartis on this request and always get your its consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Data and/or Personal Information to which you have it has had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the Novartis. Novartis will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a assigns in written agreement by assigning to the subcontractor all the rights and obligations assigned to it, under included this Purchase Order. No notwithstanding Notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis and/or Personal Information to which have access, equivalent to those imposed on the Novartis, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Novartis’ Data against any change, use and disclosure not accidental disclosure, loss or destruction or illegaldestruction. (g) Supplier shall, upon Novartis request or at the end of this Purchase Order, destroy or return to Novartis all Personal Information and/or Personal Data of Novartis collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier Supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownershipOrder. (h) Supplier shall inform Novartis immediately about any breakage or failure security or privacy failure of Novartis Data and/or Personal Information and supplier Supplier must cooperate with Novartis in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis for any loss, damage, or complaint arising out of or arising from the non-compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis Novartis’ Data and/or Personal Information related to this Purchase Order.

Supplier Obligations. (a) Supplier shall not access (including remote access), copy, use or other process any Personal Information to be less than unless it is expressly necessary for the provision of the services subject to this Purchase Order. Supplier Supplier, its employees and representatives, will ensure that the Supplier that comply with all its obligations in relation to the processing of Personal Information by force of this Purchase Order are applied employees and representativesInformation. (b) Supplier shall process the Data from the Novartis Sandoz on your their behalf only through the novartisSandoz' express instructions and will process such data exclusively for the purposes set out in this Purchase Order and in the form necessary for the implementation of the services contracted herein. (c) Where supplier Supplier is obliged to disclose any Personal Information and/or Personal Information Novartis obtained under this purchase orderPurchase Order, due to the request for of competent authority, it shall communicate immediately to Novartis Sandoz on this request and always get your its consent to any disclosure. (d) Supplier shall ensure strict confidentiality of Novartis Sandoz Data and/or Personal Information to which you have it has had access during the execution of the services now contracted and not transmit or otherwise disclose this Data and/or Personal Information to third parties. (e) Supplier may not subcontract or transfer to third parties the rights and obligations assumed through this Purchase Order without the prior written consent of the NovartisSandoz. Novartis Xxxxxx will authorize the subcontracting or transfer only if the Supplier to establish with the subcontractor a assigns in written agreement by assigning to the subcontractor all the rights and obligations assigned to it, under included this Purchase Order. No notwithstanding Notwithstanding the foregoing, the Supplier will remain fully responsible for the fulfillment of its obligations and the subcontractor, under this Purchase Order. (f) Supplier shall comply with all obligations relating to the Data Security of the Novartis Sandoz and/or Personal Information Infor- mation to which have access, equivalent to those imposed on the NovartisSandoz, and shall adopt and implement all technical and organizational measures to adequately protect Novartis Xxxxxx’ Data against any change, use and disclosure not accidental disclosure, loss or destruction or illegaldestruction. (g) Supplier shall, upon Novartis Sandoz request or at the end of this Purchase Order, destroy or return to Novartis Sandoz all Personal Information and/or Personal Data of Novartis Sandoz collected, stored and processed in the scope of this Purchase Order as well as all materials or documents generated or used by supplier Supplier in the execution of the services subject to this Purchase Order information in which there is any information Novartis' ownershipOrder. (h) Supplier shall inform Novartis Xxxxxx immediately about any breakage or failure security or privacy failure of Novartis Sandoz Data and/or Personal Information and supplier Supplier must cooperate with Novartis Sandoz in the solution of such failures, including data recovery or any other form of remediation. (i) Supplier shall indemnify Novartis Sandoz for any loss, damage, or complaint arising out of or arising from the non-non- compliance obligations assumed under this Purchase Order related to processing or implementation of technical and safety measures related to collection, storage and processing of data Novartis Sandoz’ Data and/or Personal Information related to this Purchase Order.