Data Processing Sample Clauses
A Data Processing clause defines the rules and responsibilities for handling personal or sensitive data between parties, typically in compliance with data protection laws. It outlines how data should be collected, stored, processed, and shared, often specifying security measures, permitted uses, and obligations in the event of a data breach. This clause ensures that both parties understand their roles in safeguarding data, thereby reducing the risk of unauthorized access or misuse and helping to maintain legal compliance.
POPULAR SAMPLE Copied 32 times
Data Processing. In this clause:
Data Processing. 1. Each Party shall permit a financial service supplier of another Party to transfer information in electronic or other form, into and out of its territory, for data processing where such processing is required in the ordinary course of business of such financial service supplier.
2. Each Party shall adopt adequate safeguards for the protection of the right to privacy and the freedom from interference with the privacy, family, home or correspondence of individuals, in particular with regard to the transfer of personal data.
Data Processing. In the provision of Services, Protiviti (the “Processor”) may be Processing Personal Data on behalf of the other party (the “Controller”). In these circumstances, Protiviti will:
(i) Process Personal Data only to the extent, and in such a manner as is necessary, for the performance or receipt of the Services under these Terms and Conditions and only on reasonable written instructions from the Controller, including with regard to transfers of Personal Data to a third country or an international organisation, unless required to do so by European Union or English law. In such case, the Processor will inform Controller of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest,
(ii) ensure that persons authorised to Process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality,
(iii) take all measures required by Data Protection Law relating to data security,
(iv) not engage another party to Process Personal Data without the Controller’s prior written authorisation, and if such authorisation is granted, take those measures required pursuant to the Data Protection Law,
(v) taking into account the nature of the Processing, assist Controller by appropriate technical and organisational measures, insofar as this is possible, for the fulfilment of the Controller’s obligation to respond to requests for exercising the Data Subject’s rights laid down in the Data Protection Law,
(vi) assist Controller in ensuring its compliance with data security, Personal Data Breach, data protection impact assessments, and engaging in other consultations, pursuant to Data Protection Law (taking into account the nature of processing and the information available to the Data Processor),
(vii) not keep the Personal Data it receives under these Terms and Conditions for longer than required for the execution of these Terms and Conditions, unless European Union or English law requires storage of the Personal Data, and will promptly comply with any commercially reasonable request from Controller requiring Processor to amend, transfer, or delete the Personal Data, to the extent that the Controller does not have the ability to do so itself,
(viii) subject to the confidentiality restrictions herein, make available to Controller all information necessary to demonstrate compliance with Data Protection Law and allow for and contribute to audits, includin...
Data Processing. The Dell APEX Data Processing Addendum, including all updates during the Subscription Term, (“ADPA”) describes the parties’ respective roles for the processing and control of Personal Data that You may provide to Dell as part of the APEX Service. Dell will act as Your authorized data processor in respect of the data processing activities related to the APEX Service, as specified in the Agreement, the ADPA and the Service Offering Description. You are responsible for providing any necessary legal notices to Your personnel and/or End Users and obtaining any legally required consents related to Your use, collection, disclosure, sharing, cross border data transfer, and processing of Personal Data.
Data Processing. The Data Processor agrees to Process the Personal Data to which this Addendum applies in accordance with the terms and conditions set out in this Addendum, and in particular the Data Processor agrees:
3.1. not to Process the Personal Data for any purpose other than the specific purpose of performing the Services set forth in this Addendum. The Data Processor also agrees it will not sell or rent the Personal Data for any purpose;
3.2. to Process the Personal Data only on behalf of the Data Controller and at all times in compliance with the Data Controller’s Instructions based on this Addendum. This Addendum and the Service Agreement are Data Controller’s complete and final documented Instructions at the time of execution of the Service Agreement to the Data Processor for the Processing of Personal Data. Any additional or alternate Instructions must be agreed upon separately. Instructions orally given shall be promptly confirmed in writing by the Data Controller. If the Data Processor cannot provide such compliance for whatever reasons, it agrees to promptly notify the Data Controller of its inability to comply, unless laws applicable to the Data Processor prohibit such information on important grounds of public interest. Where the Data Processor believes that compliance with any Instructions by the Data Controller would result in a violation of Data Protection Laws and Regulations, the Data Processor shall notify the Data Controller thereof in writing without delay;
3.3. that within the Data Processor’s area of responsibility, the Data Processor shall structure its internal corporate organization to ensure compliance with the specific requirements of the protection of Personal Data. The Data Processor shall take appropriate technical and organizational measures to adequately protect Personal Data Processed on behalf of the Data Controller against misuse and loss in accordance with the requirements of Data Protection Laws and Regulations. An overview of the technical and organizational measures agreed at the time of execution of this Addendum between the Parties has been attached as Schedule 2 to this Addendum. The Data Processor regularly monitors compliance with these measures. The Data Processor may change the technical and organizational measures implemented to adequately protect the Data Controller‘s Personal Data against misuse and loss as long as such changes will not materially decrease the overall security of the Services during the subscription ter...
Data Processing. The APEX Partner Data Processing Addendum, including all updates during the Subscription Term (“Partner DPA”) describes the parties’ respective roles for the processing and control of Personal Data the parties may exchange in the performance of this Agreement. You and Dell will act as independent controllers in respect of the data processing activities related to the data exchanged between the parties. You are responsible for providing any necessary legal notices to your personnel and/or purchasers, Customers, or End Users and obtaining any legally required consents related to Your use, collection, disclosure, sharing, cross border data transfer and processing of Personal Data.
Data Processing. 12.1 In this Clause 12, “personal data”, “data subject”, “data controller”, “data processor”, and “personal data breach” shall have the meaning defined in the Data Protection Legislation.
12.2 The Parties hereby agree that they shall both comply with all applicable data protection requirements set out in the Data Protection Legislation. This Clause 12 shall not relieve either Party of any obligations set out in the Data Protection Legislation and does not remove or replace any of those obligations.
12.3 For the purposes of the Data Protection Legislation and for this Clause 12, the Service Provider is the “Data Processor” and the Client is the “Data Controller”.
12.4 The Data Controller shall ensure that it has in place all necessary consents and notices required to enable the lawful transfer of personal data to the Data Processor for the purposes described in this Agreement.
12.5 The Data Processor shall, with respect to any personal data processed by it in relation to its performance of any of its obligations under this Agreement:
12.5.1 Process the personal data only on the written instructions of the Data Controller unless the Data Processor is otherwise required to process such personal data by law. The Data Processor shall promptly notify the Data Controller of such processing unless prohibited from doing so by law;
12.5.2 Ensure that it has in place suitable technical and organisational measures (as approved by the Data Controller) to protect the personal data from unauthorised or unlawful processing, accidental loss, damage or destruction. Such measures shall be proportionate to the potential harm resulting from such events, taking into account the current state of the art in technology and the cost of implementing those measures.;
12.5.3 Ensure that any and all staff with access to the personal data (whether for processing purposes or otherwise) are contractually obliged to keep that personal data confidential;
12.5.4 Not transfer any personal data outside of the UK without the prior written consent of the Data Controller and only if the following conditions are satisfied:
12.5.4.1 The Data Controller and/or the Data Processor has/have provided suitable safeguards for the transfer of personal data;
12.5.4.2 Affected data subjects have enforceable rights and effective legal remedies;
12.5.4.3 The Data Processor complies with its obligations under the Data Protection Legislation, providing an adequate level of protection to any and all personal data...
Data Processing. The terms of the data processing addendum (“DPA”) shall apply to the provision of IFS Support Services in respect of the processing of Personal Data (as defined in the DPA) and in which case Customer shall be the controller and IFS shall be the processor. The DPA shall be incorporated into the Agreement provided, and from the date that, Customer sends to ▇▇▇▇▇▇▇@▇▇▇.▇▇▇ a copy of the DPA signed by Customer in accordance with the instructions therein.
Data Processing. The administration and management of this Agreement may include ▇▇▇▇▇’s collection and processing of personal information. Such information includes non-sensitive information such as name, contact details, field of expertise and the content of this Agreement. This information may be transferred to trusted third parties for processing in countries located outside of that in which it was collected. Regardless of the country where this information is processed, Amgen maintains and requires its third-party processors to maintain appropriate administrative, technical and physical safeguards to protect the information. Transfers of personal information follow applicable laws and are subject to safeguards such as ▇▇▇▇▇’s Binding Corporate Rules (“BCRs”) or Standard Contractual Clauses. For information on Amgen’s BCRs, visit ▇▇▇▇://▇▇▇.▇▇▇▇▇.▇▇▇/bcr/. For information on Standard Contractual Clauses, contact ▇▇▇▇▇’s Data Protection Officer at ▇▇▇▇▇▇▇▇▇▇▇▇▇@▇▇▇▇▇.▇▇▇. To exercise rights, including rights to access, correct, or request deletion of personal information (subject to certain restrictions imposed by law), contact ▇▇▇▇▇’s Data Protection Officer. To lodge a complaint about the processing of personal information, contact ▇▇▇▇▇’s Data Protection Officer or the applicable National Data Protection Authority. Supplier shall ensure that its personnel whose personal information is processed hereunder receives appropriate notice to allow for the processing of personal information consistent with this Section.
Data Processing. 16.1 In this clause: