Use of Processors. Pfizer and Institution agree that all processing agreements will be in writing and that processors will be required to comply with the terms of the Agreement. For purposes of this Agreement, CRO is a processor of Pfizer. Institution and Pfizer will be responsible for any noncompliance by a processor which it has engaged, which noncompliance will constitute a breach as if committed directly by that Party. 12.
Use of Processors. The Parties and Pfizer agree that all processing agreements shall be in writing and that processors shall be required to comply with the terms of the Agreement and this Amendment. Each Party and Pfizer shall be responsible for any noncompliance by a processor which it has engaged, which noncompliance will constitute a breach as if committed directly by that Party or Pfizer. 12.
Use of Processors. The Parties and Pfizer agree that all processing agreements shall be in writing and that processors shall be required to comply with the terms of the Agreement as well as this letter agreement. Each Party and Pfizer shall be responsible for any noncompliance by a processor which it has engaged, which noncompliance will constitute a breach as if committed directly by that Party or Pfizer. 12.
Use of Processors. Where one or more Contracting Parties wish to use, for one of the processing activities in Annex A, a third party as a processor (within the meaning of article 4 GDPR) to carry out a processing of personal data on their behalf, they shall consult with the other Contracting Parties being controllers of said processing activity and enter into a processor agreement with the third party in accordance with article 28(3) GDPR and other applicable Data Protection Laws and, if such third party is in a country without an adequate level of data protection, they shall also enter into an agreement reflecting the "Standard Contractual Clauses (processors)" pursuant to the Decision 2010|87|EU (C(2010)593) of the European Commission without the Illustrative Indemnification Clause, or any clauses superseding them under the GDPR, as the case may be (the EU Model Clauses). Individual interpreters and court reporters (but not legal entities) and the Arbitral Tribunal's secretary, if any, are not be considered processors but instead acting instead under the control of the relevant processor (article 29 GDPR). Hence, the provisions of Section 3.6 shall apply to them. The Contracting Parties agree that Matter Data and other personal data related to the processing activities for which they are a controller may be stored with a Cloud or hosting service provider by a Contracting Party with no further consultation of the other Contracting Parties, provided that this occurs otherwise in compliance the above provisions of this Section 4. Data Protection Governance Data Subject and Supervisory Requests Each Contracting Party who, as a controller of a processing activity defined in Annex A, receives a data subject request (including requests for access, correction, deletion or objection) or a request from data protection supervisory shall (a) without delay inform all other Contracting Parties who are also controllers of the processing activity at issue pursuant to Annex A, and (b) in good faith agree with them on how to respond to it, it being agreed that this shall not prevent a Contracting Party from complying the GDPR and other the Data Protection Laws applicable to it. Each Contracting Party who is a controller of the processing activity at issue shall provide the other Contracting Parties who are also controllers of such processing activity any reasonably requested support allowing them to properly respond to such request pursuant to the GDPR and other Data Protection Laws applica...
Use of Processors. 22.1 The Parties acknowledge that each Party as a Controller may appoint Processor(s) to process Personal Data on its behalf.
Use of Processors. Institution and Sponsor agree that all Processing agreements shall be in writing and that Processors shall be required to comply with the terms of the Agreement as well as this Exhibit. Institution and Sponsor shall be responsible for any noncompliance by a Processor that it has engaged, which noncompliance will constitute a breach as if committed directly by that party.
Use of Processors. (a) The data importer has the controller’s general authorisation for the engagement of Processor(s) from an agreed list. The data importer shall specifically inform the data exporter in writing of any intended changes to that list through the addition or replacement of sub- processors in advance, thereby giving the data exporter sufficient time to be able to object to such changes prior to the engagement of the Processor(s). The data importer shall provide the data exporter with the information necessary to enable the data exporter to exercise its right to object.
Use of Processors. Each party agrees that it shall only appoint a Processor in relation to Controller Personal Data if it considers, after making reasonable enquiries, that the Processor shall provide the level of protection of Controller Personal Data required by the GDPR and this DPA.
Use of Processors. For each Processor retained by a Party that may have access to the Shared Data, the relevant Party shall: • conduct a prior assessment of the Processor to ensure that it is able to comply with the relevant obligations imposed on the relevant Party under this Data Processing Agreement, to be subcontracted to the Processor; • ensure that an appropriate written contract is signed between the relevant Party and each Processor, in accordance with Article 28 of the GDPR, the terms and conditions of which may not be less stringent than those set out in this Data Processing Agreement (in particular with regard to the requirements established between the Parties concerning Processing that complies with the requirements of the Data Protection Regulations in force); • remain fully liable to the other Party for all acts and/or omissions of the Processor that could cause the relevant Party to breach this Data Processing Agreement and/or the Main Agreement. Skeepers’ Processors are listed online at xxxxx://xxxxxxxx.xx/en/en-sub-processors/. Neither Party may store any Shared Data with Processors located outside the European Union or the European Economic Area (EEA), in a country that is not recognised by the European authorities as ‘adequate’, meaning providing a level of data protection equivalent to the GDPR, unless otherwise expressly agreed with the other Party. The Parties may not transfer any Shared Data to Processors located outside the European Union or the European Economic Area (EEA), in a country that is not recognised as ‘adequate’, unless otherwise expressly agreed with the other Party for certain current or future Processors performing specific services, as set out on xxxxx://xxxxxxxx.xx/en/en-sub-processors/. Each Party shall make every effort to use Processors located in the European Union, the European Economic Area (EEA) or a country recognised as ‘adequate’ whenever possible, providing the best data protection and security guarantees in accordance with the Data Protection Regulations in force. If a Party is required to transfer Shared Data outside the European Union or the European Economic Area (EEA), to a country that is not recognised as ‘adequate’, under the Union or Member State law to which it is subject, it shall inform the other Party in advance and in writing at [XXXX@XXX] at least fifteen (15) days in advance, unless the relevant law prohibits such information on important grounds of public interest. In the event that Shared Data needs to be...
Use of Processors. Institution and Sponsor agree that all Processing agreements shall be in writing and that Processors shall be required to comply with the terms of the Agreement as well as this section . Institution and Sponsor shall be responsible for any noncompliance by a Processor that it has engaged, which noncompliance will constitute a breach as if committed directly by that party. Survival. Notwithstanding anything to the contrary in the Agreement, the obligations pursuant to this section shall survive termination of the Agreement for as long as Institution holds or Processes Personal Data for purposes of the Study. podle zákonů o ochraně údajů ve věci jejich osobních údajů zpracovávaných v kontextu Studie. Zdravotnické zařízení a/nebo Zkoušející budou do dvou (2) pracovních dnů informovat společnost ICON a zadavatele o jakékoli takové žádosti obdržené od subjektu Studie, jeho právního zástupce nebo jakéhokoli jiného Subjektu údajů. Zdravotnické zařízení a/nebo Zkoušející budou s těmito žádostmi nakládat v souladu s přiměřenými pokyny Zadavatele nebo společnosti ICON (jednající jménem Xxxxxxxxxx). V případě, že Zadavatel nebo společnost ICON (jménem Xxxxxxxxxx) obdrží žádost od subjektu Studie ve věci uplatnění jeho práv podle Zákonů o ochraně osobních údajů v rámci Studie, Zadavatel nebo společnost ICON (jménem Xxxxxxxxxx) předá takovou žádost Zdravotnickému zařízení. Zdravotnické zařízení odpoví na takové žádosti subjektů Studie v souladu se zákony o ochraně osobních údajů, touto Smlouvou a dalšími pokyny poskytnutými Zadavatelem nebo společností ICON (jménem Xxxxxxxxxx). Zdravotnické zařízení bere na vědomí, že v zájmu zachování integrity výsledků Studie může být schopnost měnit, omezit nebo vymazat osobní údaje v souladu se zákony o ochraně osobních údajů a právními předpisy omezena. Odebrání souhlasu subjektů Studie. Pokud zpracování osobních údajů subjektů Studie z právního hlediska podléhá jejich souhlasu a subjekt Studie tento souhlas odvolá, bude o tom Zdravotnické zařízení neprodleně informovat Zadavatele a společnost ICON. Použití zpracovatelů. Zdravotnické zařízení a Zadavatel souhlasí s tím, že všechny dohody týkající se zpracování údajů budou písemné a že zpracovatelé budou povinni dodržovat podmínky této Smlouvy a tohoto článku. Zdravotnické zařízení a Zadavatel odpovídají za jakékoli nedodržení ze strany zpracovatele, jehož služeb využívají, a takové nedodržení bude znamenat porušení zabezpečení, jako by bylo způsobeno přímo danou Smluvní stranou. P...
