Processing of Controller Personal Data Sample Clauses
The "Processing of Controller Personal Data" clause defines how personal data controlled by one party is handled by another party, typically a data processor. It outlines the specific purposes, methods, and limitations for processing such data, often specifying requirements like data security measures, permitted subprocessors, and compliance with applicable data protection laws. This clause ensures that personal data is processed lawfully and transparently, protecting the rights of data subjects and clarifying responsibilities between the parties involved.
POPULAR SAMPLE Copied 1 times
Processing of Controller Personal Data. 3.1 Processor and each Processor Affiliate shall:
3.1.1 comply with all applicable Data Protection Laws in the Processing of Controller Personal Data; and
3.1.2 not Process Controller Personal Data other than on the relevant Controller Group Member’s written instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case Processor or the relevant Processor Affiliate shall to the extent permitted by Applicable Laws inform the relevant Controller Group Member of that legal requirement before the relevant Processing of that Controller Personal Data.
3.2 Each Controller Group Member:
3.2.1 instructs Processor and each Processor Affiliate (and authorizes Processor and each Processor Affiliate to instruct each Subprocessor and each Subprocessor Affiliate) to:
3.2.1.1 Process Controller Personal Data; and
3.2.1.2 in particular, transfer Controller Personal Data to any country or territory, as reasonably necessary for the provision of the Services and consistent with the Agreement, Applicable Laws, and this Addendum;
3.2.2 warrants and represents that it is and will at all relevant times remain duly and effectively authorized to give the instruction set out in section 3.2.1 on behalf of each relevant Controller Affiliate;
3.2.3 warrants and represents that all of its instructions to any Contracted Processor will, at all times, comply with Data Protection Laws.
3.3 Annex 1 to this Addendum sets out certain information regarding the Contracted Processors' Processing of the Controller Personal Data as required by article 28(3) of the GDPR (and, possibly, equivalent requirements of other Data Protection Laws). Controller may, upon 60 days prior written notice, make reasonable amendments to Annex 1 by written notice to Processor from time to time as Controller reasonably considers necessary to meet those requirements.
Processing of Controller Personal Data. 2.1. Processor shall Process Controller Personal Data on Controller's behalf and at Controller's instructions as specified in the Agreement and in this DPA, including without limitation with regard to transfers of Controller Personal Data to a third country or international organization. Any other Processing shall be permitted only in the event that such Processing is required by any Data Protection Laws to which the Processor is subject. In such event, Processor shall, unless prohibited by such Data Protection Laws on important grounds of public interest, inform Controller of that requirement before engaging in such Processing.
Processing of Controller Personal Data. 2.1. Processor shall not Process Controller Personal Data other than on the Controller’s documented reasonable and customary instructions as specified in the Agreement or this DPA, unless such Processing is required by Applicable Laws to which the Processor is subject or as strictly necessary for the provision of Processor's services under the Agreement.
2.2. Controller instructs Processor (and authorizes Processor to instruct each Sub Processor) to (i) Process Controller Personal Data; and (ii) in particular, transfer Controller Personal Data to any country or territory, all as reasonably necessary for the provision of the Services and consistent with the Agreement and in accordance with Applicable Laws.
2.3. Furthermore, Controller warrants and represents that it is and will remain duly and effectively authorized to give the instruction set out in Section 2.1 and any additional instructions as provided pursuant to the Agreement and/or in connection with the performance thereof, on behalf of itself and each relevant Controller Affiliate, at all relevant times and at least for as long as the Agreement is in effect and for any additional period during which Processor is lawfully processing the Controller Personal Data.
2.4. Controller sets forth the details of the Processing of Controller Personal Data, as required by article 28(3) of the GDPR in Annex 1 (Details of Processing of Controller Personal Data) hereto.
2.5. Without derogating from the provisions of the Agreement, solely Controller (and not Processor) shall be liable for any excess Controller Personal Data provided or otherwise made available to Processor or any Sub Processor in the course of providing Processor's Services under the Agreement or this DPA. Processor's obligations under the Agreement or this DPA shall not apply to any such excess Controller Personal Data.
Processing of Controller Personal Data. 3.1. The Processor shall only process Controller Personal Data for the purposes of the Order Form. The Processor shall not process, transfer, modify, amend or alter the Controller Personal Data or disclose or permit the disclosure of the Controller personal data to any third party other than in accordance with Controller’s documented instructions, unless processing is required by EU or Member State law to which Processor is subject. The Processor shall, to the extent permitted by such law, inform the Controller of that legal requirement before processing the Personal Data and comply with the Controller’s instructions to minimize, as much as possible, the scope of the disclosure.
3.2. For the purposes set out in section above, the Controller hereby instructs the Processor to transfer Controller Personal Data to the recipients in the Third Countries listed in Annex 3 (Authorized Transfers of Controller Personal Data), always provided that Processor shall comply with section 6 (Sub-Processing).
Processing of Controller Personal Data. 3.1 The Processor shall only process Controller Personal Data for the purposes of the Principal Agreement. The Processor shall not process, transfer, modify, amend or alter the Controller Personal Data or disclose or permit the disclosure of the Controller personal data to any third party other than in accordance with Controller’s documented instructions, unless processing is required by EU or Member State law to which Processor is subject. The Processor shall, to the extent permitted by such law, inform the Controller of that legal requirement before processing the Personal Data and comply with the Controller’s instructions to minimize, as much as possible, the scope of the disclosure.
3.2 For the purposes set out in section above, the Controller hereby instructs the Processor to transfer Controller Personal Data to the recipients in the Third Countries listed in Annex 3 (Authorised Transfers of Controller Personal Data), always provided that Processor shall comply with section 6. Sub-Processing.
Processing of Controller Personal Data. 2.1. The Parties acknowledge and agree that with regard to the Processing of Controller Personal Data,
(i) the customer is the Controller, (ii) Eloops is the Processor, and (iii) Processor or Processor Affiliates may engage Sub Processors pursuant to the requirements set forth in Section 5 below.
2.2. Processor shall not Process Controller Personal Data other than on the Controller’s documented reasonable and customary instructions as specified in the Agreement or in this DPA, unless such Processing is required by applicable laws to which the Processor is subject or as strictly necessary for the provision of Processor's service and product under the Agreement (together the "Services").
2.3. Controller instructs Processor (and authorizes Processor to instruct each Sub Processor) to (i) Process Controller Personal Data; and (ii) in particular, transfer Controller Personal Data to any country or territory, all as reasonably necessary for the provision of the Services and consistent with Section 2.5 below, with the Agreement and this DPA and in accordance with Applicable Laws.
2.4. Furthermore, Controller warrants and represents that it is and will remain duly and effectively authorized to give the instructions set out in Section 2.1 and any additional instructions as provided pursuant to the Agreement and this DPA and/or in connection with the performance thereof, on behalf of itself and each relevant Controller Affiliate, at all relevant times and at least for as long as the Agreement and this DPA are in effect and for any additional period during which Processor is lawfully processing the Controller Personal Data.
2.5. Controller hereby sets forth the details of the Processing of Controller Personal Data, as required by article 28(3) of the GDPR in Annex 1 (Details of Processing of Controller Personal Data) hereto.
2.6. Controller Personal Data may be transferred from the EU Member States, EEA member countries, and the United Kingdom (collectively, "EEA"), (i) to countries that offer adequate level of data protection under or pursuant to the adequacy decisions published by the relevant data protection authorities of the EEA, the European Union, Member States or the European Commission, without any further safeguard being necessary; (ii) to the United States, solely for Processing by Processor or Sub Processor on its behalf which has self-certified and comply with the EU-US and Swiss-US Privacy Shield Frameworks, as administered by the US Department of Comme...
Processing of Controller Personal Data. 3.1 When acting as a Data Processor in relation to Personal Data provided by the Customer acting as a Data Controller, TagoIO shall:
3.1.1 not Process the Personal Data or disclose Personal Data other than in accordance with this DPA unless required by EU or Member State law to which TagoIO is subject, in which case, TagoIO shall to the extent permitted by such law inform the Customer of that legal requirement before the relevant Processing of that Personal Data;
3.1.2 implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk and shall take all measures required pursuant to Article 32 GDPR in relation to the Processing of Personal Data, taking account of the risks that are presented by Processing, in particular from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Personal Data transmitted, stored or otherwise Processed;
3.1.3 provide controls that can be used by the Customer to retrieve or delete Personal Data to assist in connection with obligations relating to requests from Data Subjects to exercise their rights unders applicable Data Protection Laws (“Data Subject Requests''). And when needed, assist the Customer in the Customer's obligation to respond to these communications, provided that the Customer shall reimburse TagoIO in full for all costs reasonably and properly incurred by TagoIO performing its obligations under this clause
Processing of Controller Personal Data. 3.1. Processor shall Process Controller Personal Data on Controller's behalf and at Controller's instructions as specified in the Agreement and in this DPA, including without limitation, with regard to transfers of Controller Personal Data to a third country or international organization and to other controllers, who may process Controller Personal Data at their discretion. Controller's approval of partners or publishers that are designated as controllers (including via email) shall constitute Controller's instructions to transfer Controller Personal Data to such other controllers in accordance with this section. Any other Processing shall be permitted only in the event that such Processing is required by any Data Protection Laws to which the Processor is subject. In such event, Processor shall, unless prohibited by such Data Protection Laws on important grounds of public interest, inform Controller of that requirement before engaging in such Processing.
3.2. Controller instructs Processor (and authorizes Processor to instruct each Sub Processor) (i) to Process Controller Personal Data for the provision of the services, as detailed in the Agreement ("Services") and as otherwise set forth in the Agreement and in this DPA, and/or as otherwise directed by Controller; (ii) where Controller has approved engagement with partners or publishers designated as controllers, to transfer Controller Personal Data to such approved controllers; and
Processing of Controller Personal Data. 2.1. The Controller instructs the Processor to process Controller Personal Data.
2.2. The Processor shall treat personal data as confidential and the Processor shall not process Controller Personal Data other than on the Controller’s documented reasonable and customary instructions as specified in the Agreement or this Addendum,unless such processing is required by Applicable Data Protection Law.
2.3. The Processor shall inform the Controller if, in its opinion, an instruction from the Controller infringes any Applicable Data Protection Law.
2.4. The details of the processing of Controller Personal Data are set out in Schedule 1.
Processing of Controller Personal Data. 2.1 The Processor shall:
2.1.1 comply with all applicable Data Protection Laws in the Processing of Controller Personal Data; and
2.1.2 not Process Controller Personal Data other than on the Controller’s documented instructions unless Processing is required by Applicable Laws to which the relevant Contracted Processor is subject, in which case the Processor shall to the extent permitted by Applicable Laws inform the Controller of that legal requirement before the relevant Processing of that Personal Data.