Common use of Assistance to the Customer Clause in Contracts

Assistance to the Customer. 1. Taking into account the nature of the processing, Innoflow shall assist the Customer by appropriate technical and organisational measures, insofar as this is possible, in the fulfilment of the Customer’s obligations to assist the Customer with responding to requests for exercising the data subject’s rights laid down in Chapter III GDPR. This entails that Innoflow shall, insofar as this is possible, assist the Customer with the Customer's compliance with: a. the right to be informed when collecting personal data from the data subject b. the right to be informed when personal data have not been obtained from the data subject c. the right of access by the data subject d. the right to rectification e. the right to erasure (‘the right to be forgotten’) f. the right to restriction of processing g. notification obligation regarding rectification or erasure of personal data or restriction of processing h. the right to data portability i. the right to object j. the right not to be subject to a decision based solely on automated processing, including profiling 2. In addition to ▇▇▇▇▇▇▇▇’s obligation to assist the Customer pursuant to Clause 6.3., Innoflow shall furthermore, taking into account the nature of the processing and the information available to Innoflow, assist the Customer in ensuring compliance with: a. The Customer’s obligation to without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons; b. the Customer’s obligation to without undue delay communicate the personal data breach to the data subject, when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons; c. the Customer’s obligation with carrying out an assessment of the impact of the envisaged processing operations on the protection of personal data (a data protection impact assessment); d. the Customer’s obligation with consulting the competent supervisory authority, prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the Customer to mitigate the risk. 3. The parties shall define in Appendix C the appropriate technical and organisational measures by which Innoflow is required to assist the Customer as well as the scope and the extent of the assistance required. This applies to the obligations foreseen in Clause 9.1. and 9.2.

Assistance to the Customer. 1. 6.1 Taking into account the nature of the processingProcessing, Innoflow the Supplier shall assist the Customer by appropriate technical and organisational measures, insofar as this is possible, in the fulfilment of the Customer’s obligations to assist the Customer with responding respond to requests for exercising the data subjectData Subject’s rights laid down in Chapter III GDPR. This entails that Innoflow shall, insofar as this is possible, assist the Customer with the Customer's compliance with:. a. the right to be informed when collecting personal data from the data subject b. the right to be informed when personal data have not been obtained from the data subject c. the right of access by the data subject d. the right to rectification e. the right to erasure (‘the right to be forgotten’) f. the right to restriction of processing g. notification obligation regarding rectification or erasure of personal data or restriction of processing h. the right to data portability i. the right to object j. the right not to be subject to a decision based solely on automated processing, including profiling 2. 6.2 In addition to ▇▇▇▇▇▇▇▇the Supplier’s obligation to assist the Customer pursuant to Clause 6.3.Section 4.2, Innoflow the Supplier shall furthermore, taking into account the nature of the processing Processing and the information available to Innoflowthe Supplier, assist the Customer in ensuring compliance with: a. The a) the Customer’s obligation to without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data Personal Data breach to the competent supervisory authoritySupervisory Authority, unless the personal data Personal Data breach is unlikely to result in a risk to the rights and freedoms of natural persons; b. b) the Customer’s obligation to without undue delay communicate the personal data Personal Data breach to the data subjectData Subject, when the personal data Personal Data breach is likely to result in a high risk to the rights and freedoms of natural persons; c. c) the Customer’s obligation with carrying to carry out an assessment of the impact of the envisaged processing Processing operations on the protection of personal data Personal Data (a data protection impact assessment); d. d) the Customer’s obligation with consulting to consult the competent supervisory authority, Supervisory Authority prior to processing Processing where a data protection impact assessment indicates that the processing Processing would result in a high risk in the absence of measures taken by the Customer to mitigate the risk. 3. 6.3 The parties shall define in Appendix C 1 the appropriate technical and organisational measures by which Innoflow the Supplier is required to assist the Customer as well as the scope and the extent of the assistance required. This applies . 6.4 The Customer shall compensate the Supplier for extra work relating to the obligations foreseen Supplier’s obligation set forth in Clause 9.1. this section 6, if such work is carried out on the basis of updated instructions on the Processing of Personal Data provided by the Customer that goes beyond the requirements set out in the GDPR and 9.2what the Supplier normally offers its customer, according to the hourly rate applied by the Supplier from time to time.

Assistance to the Customer. 1. Taking into account the nature of the processing, Innoflow shall assist the Customer by appropriate technical and organisational measures, insofar as this is possible, in the fulfilment of the Customer’s obligations to assist the Customer with responding to requests for exercising the data subject’s rights laid down in Chapter III GDPR. This entails that Innoflow shall, insofar as this is possible, assist the Customer with the Customer's compliance with: a. the right to be informed when collecting personal data from the data subject b. the right to be informed when personal data have not been obtained from the data subject c. the right of access by the data subject d. the right to rectification e. the right to erasure (‘the right to be forgotten’) f. the right to restriction of processing g. notification obligation regarding rectification or erasure of personal data or restriction of processing h. the right to data portability i. the right to object j. the right not to be subject to a decision based solely on automated processingpro- cessing, including profiling 2. In addition to ▇▇▇▇▇▇▇▇Innoflow’s obligation to assist the Customer pursuant to Clause 6.3., Innoflow shall furthermore, taking into account the nature of the processing and the information available to Innoflow, assist the Customer in ensuring compliance with: a. The Customer’s obligation to without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural personsper- sons; b. the Customer’s obligation to without undue delay communicate the personal data breach to the data subject, when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons; c. the Customer’s obligation with carrying out an assessment of the impact of the envisaged processing operations on the protection of personal data (a data protection impact assessment); d. the Customer’s obligation with consulting the competent supervisory authorityauthor- ity, prior to processing where a data protection impact assessment indicates that the processing would result in a high risk in the absence of measures taken by the Customer to mitigate the risk. 3. The parties shall define in Appendix C the appropriate technical and organisational measures by which Innoflow is required to assist the Customer as well as the scope and the extent of the assistance required. This applies to the obligations foreseen in Clause 9.1. and 9.2.