Common use of DATA PROTECTION Clause in Contracts

DATA PROTECTION. The personal data that might be requested from the Purchaser by the Supplier are essential to ensure the processing of the order or compliance with legal obligations. Access to personal data will be strictly limited to those employees of the Supplier authorised to process such data on account of their roles. The data might also be communicated to third parties linked to the Supplier by a contract for the provision of outsourced services (eg. carrier), without requiring the authorisation of the Purchaser. Personal data will be retained for as long as necessary to fulfil the orders and the associated guarantees. The Purchaser has the right of access, rectification, erasure and portability on its data, as well as the right to object to the processing of its data on legitimate grounds. It may do so by contacting the Supplier’s data controller at the following electronic address: xxx@xxxxxxxxxxx.xxx. For any complaints, the Purchaser may contact the Commission Nationale de l’Informatique et des Libertés (the French Data Protection Authority, abbreviated to the CNIL).