Common use of Exercise of access rights Clause in Contracts

Exercise of access rights. 3.1. If data subjects, competent authorities or any other third parties request information or seek to exercise any rights under data protection law from Data Processor regarding the processing of Personal Data (“Requests”), Data Processor shall refer such Request to the Data Controller unless Data Processor is prevented by law from doing so. Subject to clause 3.2, Data Processor may not, in any way, respond to such a Request in such a way as to act on behalf of or as a representative of Data Controller and may not, without prior instructions from Data Controller, transfer or in any other way disclose Personal Data or any other information relating to the processing of Personal Data to any third party in connection with a Request except in accordance with this DPA. Data Controller shall be solely responsible for responding substantively to any such Requests. 3.2. In the event that the Data Processor cannot determine the applicable data controller from the Request, the Data Processor may contact the data subject for further information. In the event Data Processor, according to applicable laws and regulations, is required to disclose Personal Data that Data Processor processes on behalf of Data Controller, Data Processor shall be obliged to inform Data Controller thereof immediately and request confidentiality in conjunction with the disclosure of requested information, unless Data Processor is prevented by law from doing so.