Data processing and data transfer Vzorová ustanovení

Data processing and data transfer. The Merchant shall expressly authorize SPS, prior to the Contract Module coming into force and throughout its duration, to obtain all information, including personal data that SPS deems to be important in relation to the Contract Module and the fulfillment of the services established therein. Furthermore, SPS is entitled to transfer data from the Contract Modules and Framework Agreement within the scope required to third parties appointed by SPS in order to assess potential risks or execute transac- tions. Data shall also be forwarded to card schemes for marketing pur- poses. The Merchant acknowledges that the data (in particular master data and transaction data) related to the conclusion and fulfillment of the Contract Modules is processed in Switzerland and in countries of the EU. As part of Alipay’s acceptance, the contracting partner additionally acknowledges that Alipay shall also process master data, transaction data and marketing in the People’s Republic of China. SPS, in its capacity as the entity responsible for data processing, collects and processes personal data of the Merchant and/or the natural persons connected to the ▇▇▇▇▇▇▇▇’▇ organization in order to ensure the following: – identification of the Merchant and/or the natural persons connected to the ▇▇▇▇▇▇▇▇’▇ organization; – correct execution of the Contract Modules; and – compliance with legal obligations. SPS shall take the appropriate technical measures and implement an ade- quate organization in order to ensure the protection of such personal data and shall process it as per the above-mentioned purposes and in accor- dance with the applicable data protection laws, including the Payment Ser- vices Directive as well as the national transposition laws, and from 25 May 2018, the General Data Protection Regulation (EU) 2016/679. The Merchant agrees to this and grants its express consent to the data processing. The Merchant and, as the case may be, the natural persons connected to the ▇▇▇▇▇▇▇▇’▇ organization, have the right to access their personal data as well as the right to correct and delete this data and, as from 25 May 2018, the right to the portability of their personal data in accordance with the applicable laws. The Merchant is obliged to take all of the necessary measures in order to inform the natural persons connected to its organization of the process- ing of their personal data within the meaning of this section and to ensure that these persons have consented to the data proces...