WE AGREE. 21.2.1.1. to ensure that appropriate technical and organisational measures are taken against unauthorised or unlawful processing of the Personal Data and against accidental loss or destruction of, or damage to, Personal Data, to ensure the confidentiality of the Personal Data is maintained at all times and to ensure that personnel who receive Personal Data are under a duty of confidentiality; 21.2.1.2. to comply with all other obligations under DP Law and to notify you and any relevant parties of any Personal Data Breach immediately upon becoming aware of such breach and in compliance with DP Law; 21.2.1.3. to process Personal Data solely in accordance with this Contract and any instructions received from you or the end user from time to time and to immediately terminate any relationship with the Data Processor if any processing carried out by the Data Processor is found to knowingly infringe DP Law; 21.2.1.4. upon termination of this Contract (for any reason), or at any time on request, to destroy any copies of Personal Data and sign a declaration that this has been done. This clause shall not affect our right to keep the Personal Data to comply with our obligations; 21.2.1.5. not to carry out any processing of the Personal Data or transfer any such Personal Data outside of the EEA. If we do begin to process Personal Data outside the EEA, we will only transfer it to those jurisdictions with the equivalent data protection laws regulations and practices. 21.2.1.6. not to use any Personal Data other than in accordance with this Contract; 21.2.1.7. where we sub-contract any of our obligations, we will ensure that a contract is put in place which imposes the same obligations as are contained in this Contract before we disclose any Personal Data; 21.2.1.8. to respond within 30 days of receiving a request from a Data Subject as to how their Personal Data is being processed; 21.2.1.9. to have appropriate vetting procedures in place in respect of our staff, sub-contractors or anyone else who undertakes activities which involves processing Personal Data and we will make sure that they understand the need to observe the requirements of this Contract; 21.2.1.10. to provide you or the end user with the following, when requested in writing: a. confirmation of whether and where we are processing a Data Subject’s Personal Data; b. information about the purposes of processing a Data Subject’s Personal Data c. information about the categories of Personal Data being processed; d. information about the categories of recipients with whom the Personal Data may be shared; e. information about the period for which the data will be stored; f. information about a Customers right to complain to the Information Commissioners Office; and g. any information the existence of any automated processing.
Appears in 2 contracts
Samples: Supply Agreement, Supply Agreement
WE AGREE. 21.2.1.120.2.1.1. to ensure that appropriate technical and organisational measures are taken against unauthorised or unlawful processing of the Personal Data and against accidental loss or destruction of, or damage to, Personal Data, to ensure the confidentiality of the Personal Data is maintained at all times and to ensure that personnel who receive Personal Data are under a duty of confidentiality;
21.2.1.220.2.1.2. to comply with all other obligations under DP Law and to notify you and any relevant parties of any Personal Data Breach immediately upon becoming aware of such breach and in compliance with DP Law;
21.2.1.320.2.1.3. to process Personal Data solely in accordance with this Contract and any instructions received from you or the end user from time to time and to immediately terminate any relationship with the Data Processor if any processing carried out by the Data Processor is found to knowingly infringe DP Law;
21.2.1.420.2.1.4. upon termination of this Contract (for any reason), or at any time on request, to destroy any copies of Personal Data and sign a declaration that this has been done. This clause shall not affect our right to keep the Personal Data to comply with our obligations;
21.2.1.520.2.1.5. not to carry out any processing of the Personal Data or transfer any such Personal Data outside of the EEA. If we do begin to process Personal Data outside the EEA, we will only transfer it to those jurisdictions with the equivalent data protection laws regulations and practices.
21.2.1.620.2.1.6. not to use any Personal Data other than in accordance with this Contract;
21.2.1.720.2.1.7. where we sub-contract any of our obligations, we will ensure that a contract is put in place which imposes the same obligations as are contained in this Contract before we disclose any Personal Data;
21.2.1.820.2.1.8. to respond within 30 days of receiving a request from a Data Subject as to how their Personal Data is being processed;
21.2.1.920.2.1.9. to have appropriate vetting procedures in place in respect of our staff, sub-contractors or anyone else who undertakes activities which involves processing Personal Data and we will make sure that they understand the need to observe the requirements of this Contract;
21.2.1.1020.2.1.10. to provide you or the end user with the following, when requested in writing:
a. confirmation of whether and where we are processing a Data Subject’s Personal Data;
b. information about the purposes of processing a Data Subject’s Personal Data
c. information about the categories of Personal Data being processed;
d. information about the categories of recipients with whom the Personal Data may be shared;
e. information about the period for which the data will be stored;
f. information about a Customers right to complain to the Information Commissioners Office; and
g. any information the existence of any automated processing.
Appears in 2 contracts
Samples: Supply Agreement, Supply Agreement
WE AGREE. 21.2.1.1. 20.2.1.1 to ensure that appropriate technical and organisational measures are taken against unauthorised or unlawful processing of the Personal Data and against accidental loss or destruction of, or damage to, Personal Data, to ensure the confidentiality of the Personal Data is maintained at all times and to ensure that personnel who receive Personal Data are under a duty of confidentiality;
21.2.1.2. 20.2.1.2 to comply with all other obligations under DP Law and to notify you and any relevant parties of any Personal Data Breach immediately upon becoming aware of such breach and in compliance with DP Law;
21.2.1.3. 20.2.1.3 to process Personal Data solely in accordance with this Contract and any instructions received from you or the end user from time to time and to immediately terminate any relationship with the Data Processor if any processing carried out by the Data Processor is found to knowingly infringe DP Law;
21.2.1.4. 20.2.1.4 immediately upon termination of this Contract (for any reason), or at any time on request, to destroy any copies of Personal Data and sign a declaration that this has been done. This clause shall not affect our right to keep the Personal Data to comply with our obligations;
21.2.1.5. 20.2.1.5 not to carry out any processing of the Personal Data or transfer any such Personal Data outside of the EEA. If we do begin to process Personal Data outside the EEA, we will only transfer it to those jurisdictions with the equivalent data protection laws regulations and practices.
21.2.1.6. 20.2.1.6 not to use any Personal Data other than in accordance with this Contract;
21.2.1.7. 20.2.1.7 where we sub-contract any of our obligations, we will ensure that a contract is put in place which imposes the same obligations as are contained in this Contract before we disclose any Personal Data;
21.2.1.8. 20.2.1.8 to respond within 30 days of receiving a request from a Data Subject as to how their Personal Data is being processed;
21.2.1.9. to have appropriate vetting procedures in place in respect of our staff, sub-contractors or anyone else who undertakes activities which involves processing Personal Data and we will make sure that they understand the need to observe the requirements of this Contract;
21.2.1.10. 20.2.1.9 to provide you or the end user with the following, when requested in writing:
a. confirmation of whether and where we are processing a Data Subject’s Personal Data;
b. information about the purposes of processing a Data Subject’s Personal Data
c. information about the categories of Personal Data being processed;
d. information about the categories of recipients with whom the Personal Data may be shared;
e. information about the period for which the data will be stored;
f. information about a Customers right to complain to the Information Commissioners Office; and
g. any information the existence of any automated processing.
20.1.2.10 to have appropriate vetting procedures in place in respect of our staff, sub-contractors or anyone else who undertakes activities which involves processing Personal Data and we will make sure that they understand the need to observe the requirements of this Contract.
Appears in 1 contract
Samples: Supply Agreement