Without prejudice to the generality of Clause 10.1, GO Power shall, in relation to any Personal Data processed in connection with the performance by GO Power of its obligations under this Agreement:
(a) process that Personal Data only on the written instructions of the Customer unless GO Power is required by the laws of any member of the European Union or by the laws of the European Union applicable to GO Power to process Personal Data (Applicable Data Processing Laws). Where GO Power is relying on laws of a member of the European Union or European Union law as the basis for processing Personal Data, GO Power shall promptly notify the Customer of this before performing the processing required by the Applicable Data Processing Laws unless those Applicable Data Processing Laws prohibit GO Power from so notifying the Customer;
(b) process that Personal Data only to the extent necessary for the legitimate interest of GO Power and its specified third parties, and as required for the performance of this Agreement and the rights of GO Power under it;
(c) ensure that it has in place appropriate technical and organisational measures to protect against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures (those measures may include, where appropriate, pseudonymising and encrypting Personal Data, ensuring confidentiality, integrity, availability and resilience of its systems and services, ensuring that availability of and access to Personal Data can be restored in a timely manner after an incident, and regularly assessing and evaluating the effectiveness of the technical and organisational measures adopted by it);
(d) ensure that all personnel who have access to and/or process Personal Data are obliged to keep the Personal Data confidential;
(e) not transfer any Personal Data outside of the European Economic Area unless the consent of the Customer has been obtained and the following conditions are fulfilled:
(i) the Customer or GO Power has provided appropriate safeguards in relation to the transfer;
(ii) the data subject has enforceable rights and effective legal remedies;
(iii) GO Power complies with its obligations under the Data Protection Legislation by providing an adequate level of protection to any Personal Data that is transferred; and
(iv) GO Power complies with reasonable instructions notified to it in advance by the Customer with respect to the processing of the Personal Data;
(f) assist the Customer, at the Customer’s cost, in responding to any request from a Data Subject and in ensuring compliance with its obligations under the Data Protection Legislation with respect to security, breach notifications, impact assessments and consultations with supervisory authorities or regulators;
(g) notify the Customer without undue delay on becoming aware of a Personal Data breach; AND
(h) at the written direction of the Customer, delete or return Personal Data and copies thereof to the Customer on termination of the Agreement unless required by Applicable Data Processing Law to store the Personal Data;
Without prejudice to Paragraph 6.1, University’s liability to the Licensee for all losses or damage of any kind howsoever caused shall be limited to the aggregate total amount received by University from Licensee under this Agreement as at the date of such breach.
Without prejudice to Clause 10.1 above, this Clause shall remain in full force and effect notwithstanding any discharge, release or termination of this Pledge (whether or not in accordance with Clause 7.1 of this Pledge Agreement).
Without Prejudice or Precedent The parties to the Committee agree that any discussion at the Committee will be on a without-prejudice and without-precedent basis, unless agreed otherwise.
Without prejudice all proceedings and disclosures will be conducted and made without prejudice to the rights and positions of the parties in any subsequent arbitration or other legal proceedings;
Without prejudice to Sections 5.1 and 5.2 above, You are responsible for (a) any required notices, consents and/or authorizations related to Your provision of, and our processing of, Your Content (including any Personal Data) as part of the Services, (b) any security vulnerabilities, and the consequences of such vulnerabilities, arising from Your Content, including any viruses, Trojan horses, worms or other harmful programming routines contained in Your Content, and (c) any use by You or Your Users of the Services in a manner that is inconsistent with the terms of this Agreement. To the extent You disclose or transmit Your Content to a third party, we are no longer responsible for the security, integrity or confidentiality of such content outside of Oracle’s control.
Without Party A’s prior written consent, Party B shall not assign its rights and obligations under this Agreement to any third party.
Obligations of the data exporter The data exporter agrees and warrants:
(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;
(b) that it has instructed and throughout the duration of the personal data processing services will instruct the data importer to process the personal data transferred only on the data exporter's behalf and in accordance with the applicable data protection law and the Clauses;
(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;
(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;
(e) that it will ensure compliance with the security measures;
(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;
(g) to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;
(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for subprocessing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;
(i) that, in the event of subprocessing, the processing activity is carried out in accordance with Clause 11 by a subprocessor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and
(j) that it will ensure compliance with Clause 4(a) to (i). The data importer agrees and warrants:
(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;
(d) that it will promptly notify the data exporter about:
(i) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation,
(ii) any accidental or unauthorised access, and
(iii) any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
(e) to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;
(f) at the request of the data exporter to submit its data processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority;
(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for subprocessing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;
(h) that, in the event of subprocessing, it has previously informed the data exporter and obtained its prior written consent;
(i) that the processing services by the subprocessor will be carried out in accordance with Clause 11;
(j) to send promptly a copy of any subprocessor agreement it concludes under the Clauses to the data exporter.
Notifications and Other Indemnification Procedures Promptly after receipt by an indemnified party under this Section 8 of notice of the commencement of any action, such indemnified party will, if a claim in respect thereof is to be made against an indemnifying party under this Section 8, notify the indemnifying party in writing of the commencement thereof, but the omission to so notify the indemnifying party will not relieve the indemnifying party from any liability which it may have to any indemnified party to the extent the indemnifying party is not materially prejudiced as a proximate result of such failure and shall not in any event relieve the indemnifying party from any liability that it may have otherwise than on account of this indemnity agreement. In case any such action is brought against any indemnified party and such indemnified party seeks or intends to seek indemnity from an indemnifying party, the indemnifying party will be entitled to participate in, and, to the extent that it shall elect, jointly with all other indemnifying parties similarly notified, by written notice delivered to the indemnified party promptly after receiving the aforesaid notice from such indemnified party, to assume the defense thereof with counsel reasonably satisfactory to such indemnified party; provided, however, that if the defendants in any such action include both the indemnified party and the indemnifying party and the indemnified party shall have reasonably concluded that a conflict may arise between the positions of the indemnifying party and the indemnified party in conducting the defense of any such action or that there may be legal defenses available to it and/or other indemnified parties which are different from or additional to those available to the indemnifying party, the indemnified party or parties shall have the right to select separate counsel to assume such legal defenses and to otherwise participate in the defense of such action on behalf of such indemnified party or parties. Upon receipt of notice from the indemnifying party to such indemnified party of such indemnifying party’s election so to assume the defense of such action and approval by the indemnified party of counsel, the indemnifying party will not be liable to such indemnified party under this Section 8 for any legal or other expenses subsequently incurred by such indemnified party in connection with the defense thereof unless (i) the indemnified party shall have employed separate counsel in accordance with the proviso to the preceding sentence (it being understood, however, that the indemnifying party shall not be liable for the fees and expenses of more than one separate counsel (together with local counsel), representing the indemnified parties who are parties to such action), which counsel (together with any local counsel) for the indemnified parties shall be selected by the Representative (in the case of counsel for the indemnified parties referred to in Section 8(a) above) or by the Company (in the case of counsel for the indemnified parties referred to in Section 8(b) above) or (ii) the indemnifying party shall not have employed counsel satisfactory to the indemnified party to represent the indemnified party within a reasonable time after notice of commencement of the action or (iii) the indemnifying party has authorized in writing the employment of counsel for the indemnified party at the expense of the indemnifying party, in each of which cases the fees and expenses of counsel shall be at the expense of the indemnifying party and shall be paid as they are incurred.
Conditions Precedent to the Obligations of the Purchaser Each and every obligation of the Purchaser under this Agreement to be performed at or before the Closing shall be subject to the satisfaction, at the Closing, of each of the following conditions:
