UNDERTAKING AND INSTRUCTION. 3.1 SEON undertakes:
(a) to process and transfer Customer Data in accordance with the Data Protection Legislation, the Agreement and as further documented in any other written instructions given by Controller and acknowledged by SEON as constituting instructions for purposes of this DPA;
(b) to inform Controller prior to processing that SEON is required by laws of the European Union or EU Member States, to which SEON is subject, to process Customer Data, provided that SEON is not prohibited to give such information on important grounds of public interest;
(c) to immediately inform Controller if, in its opinion, an instruction of Controller infringes applicable Data Protection Legislation. SEON will be under no obligation to follow such instruction, until the matter is resolved in good-faith between the parties;
(d) to keep Customer Data confidential and ensure that persons authorised to process Customer Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality;
(e) to implement all appropriate technical and organisational measures necessary in order to ensure a level of security, as required pursuant to the Data Protection Legislation, and necessary in order for SEON to comply with the security requirements set out in Appendix 1 of the DPA. SEON shall notify Controller about changes in the applied technical and organizational security measures that significantly affect the security of the processing of Customer Data;
(f) to assist Controller in the fulfilment of Controller's obligation to respond to and to fulfil requests from data subjects exercising their rights laid down in the Data Protection Legislation taking into account the nature of the processing, by implementing appropriate technical and organisational measures, insofar as this is possible. SEON shall notify Controller in case of receiving a request to exercise the data subjects’ rights under the Data Protection Legislation without undue delay after receiving such request, and SEON should reasonably cooperate with Controller in addressing such request. Unless Controller otherwise instructs SEON, the notification of such request shall be sent to Controller’s Email Address. If Controller provided more than one Controller’s Email Address, notification sent to at least one of Controller’s Email Address shall be sufficient to comply with this section. SEON is not responsible or liable for responding to the data subject; (g) to assist Control...
UNDERTAKING AND INSTRUCTION. 3.1 Processor undertakes to process the personal data that it has access to under the Master Service Agreement to which this DPA form an integral part (the “Agreement”) on behalf of Controller, for the purpose of fulfilling the Agreement and during the term of the Agreement.
