Common use of Processing of Personal Data Clause in Contracts

Processing of Personal Data. 15.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 IUCN may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN partners strictly involved in the implementation of the Project. The Consultant will have the right of access its Personal Data and the right to rectify any such Personal Data held by IUCN. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform). 15.3 IUCN may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use of Personal Data to that strictly necessary for the performance of this Agreement and shall adopt all appropriate technical and organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Data. 15.4 Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCN, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN for the performance of that other processor’s obligations. 15.5 Where Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 The Consultant shall promptly, and in any case within twenty-four (24) hours inform IUCN through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred.

Processing of Personal Data. 15.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 IUCN may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN partners strictly involved in the implementation of the Project. The Consultant will have the right of access its Personal Data and the right to rectify any such Personal Data held by IUCN. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform). 15.3 IUCN may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use of Personal Data to that strictly necessary for the performance of this Agreement and shall adopt all appropriate technical and organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Data. 15.4 Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCN, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN for the performance of that other processor’s obligations. 15.5 Where Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 The Consultant shall promptly, and in any case within twenty-four (24) hours inform IUCN through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred.

Processing of Personal Data. 15.1 14.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 14.2 IUCN may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN partners strictly involved in the implementation of the Project. The Consultant will have the right of to access its his/her Personal Data and the right to rectify any such Personal Data held by IUCN. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform). 15.3 14.3 IUCN may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use of Personal Data to that strictly necessary for the performance of this Agreement and shall adopt all appropriate technical and organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Data. 15.4 14.4 Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCN, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN for the performance of that other processor’s obligations. 15.5 14.5 Where Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 14.6 The Consultant shall promptly, and in any case within twenty-four (24) hours inform IUCN through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred.

Processing of Personal Data. 15.1 16.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 IUCN 16.2 Secretariat may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN Secretariat partners strictly involved in the implementation of the Project. The Consultant will have the right of access its Personal Data and the right to rectify any such Personal Data held by IUCNSecretariat. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN Secretariat using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform). 15.3 IUCN 16.3 Secretariat may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use of Personal Data to that strictly necessary for the performance of this Agreement and shall adopt all appropriate technical and organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Data. 15.4 16.4 Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCNSecretariat, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN Secretariat for the performance of that other processor’s obligations. 15.5 16.5 Where Secretariat’s Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 16.6 The Consultant shall promptly, and in any case within twentyforty-four eight (2448) hours inform IUCN Secretariat through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred.

Processing of Personal Data. 15.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 . IUCN may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN partners strictly involved in the implementation of the Project. The Consultant will have the right of to access its his/her Personal Data and the right to rectify any such Personal Data held by IUCN. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform). 15.3 . IUCN may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use of Personal Data to that strictly necessary for the performance of this Agreement and shall adopt all appropriate technical and organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Data. 15.4 . Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCN, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN for the performance of that other processor’s obligations. 15.5 . Where Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 . The Consultant shall promptly, and in any case within twenty-four (24) hours inform IUCN through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred. Termination for cause IUCN reserves the right to terminate this Agreement in whole or in part, upon written notice with immediate effect in the event that: The Consultant has falsified or provided inaccurate, incomplete or misleading information in any documentation provided to IUCN; IUCN is not satisfied with the Services delivered by the Consultant; The Consultant defaults in carrying out any of its obligations under this Agreement; The Consultant has engaged in illegal acts, including, without limitation fraudulent or corrupt actions as defined in Code of Conduct and Professional Ethics for the Secretariat and IUCN's Anti-fraud and Anti-corruption Policy (hereafter referred to as a “Fraud”); The Consultant enters into liquidation or dissolution other than for the purpose of an amalgamation or reconstruction; or The Consultant ceases to carry on business, has a receiver or administrator appointed over all or any part of its assets or undertaking, enters into any composition or arrangement with its creditors or takes or suffers any similar action in consequence of a debt or other liability, or undergoes any process analogous to the foregoing in any jurisdiction throughout the world. If it is determined that the Consultant has committed Fraud in competing for or in the performance of this Agreement, all expenditures incurred under this Agreement shall be undue and the Consultant shall promptly reimburse IUCN for all expenditures incurred in the performance of this Agreement. Termination for lack of Donor funds IUCN shall have the right to terminate this Agreement with immediate effect and without any liability for damages to the Consultant in case the agreement between IUCN and the Donor is terminated and/or the Remuneration funds become unavailable to IUCN. Termination for force majeure The performance of this Agreement by either Party is subject to war, government regulations, epidemics, pandemics, natural disaster, strikes (excluding strikes of respective Parties’ personnel), civil disorders, curtailment of transportation facilities, embargoes, acts of terrorism, floods, earthquakes or other emergencies making it illegal or impossible for either Party to perform its obligations (“Force Majeure Event”). The Party subject to a Force Majeure Event shall promptly notify the other Party of the occurrence and particulars of such Force Majeure Event, including how it impacts the performance of its obligations under this Agreement. The Party so affected shall use diligent efforts to avoid or remove such causes of non or delayed performance as soon as is reasonably practicable. This Agreement may be terminated unilaterally without compensation for any one or more of the foregoing reasons by written notice from one Party to the other. Notwithstanding the above, the Parties may agree to a suspension or an extension of the Agreement as deemed appropriate. Upon termination of the Force Majeure Event, the performance of the suspended Services shall without delay recommence. The Party subject to the Force Majeure Event shall not be liable to the other Party for any damages arising out of or relating to the suspension or termination of Services by reason of the occurrence of a Force Majeure Event, provided such Party complies with all the requirements under this article 15.3.

Processing of Personal Data. 15.1 16.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 IUCN 16.2 The Secretariat may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN Secretariat’s partners strictly involved in the implementation of the Project. The Consultant will have the right of access its Personal Data and the right to rectify any such Personal Data held by IUCNthe Secretariat. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN Secretariat using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform)... 15.3 IUCN 16.3 The Secretariat may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use of Personal Data to that strictly necessary for the performance of this Agreement and shall adopt all appropriate technical and organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Data. 15.4 16.4 Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCNthe Secretariat, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN the Secretariat for the performance of that other processor’s obligations. 15.5 16.5 Where the Secretariat’s Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 16.6 The Consultant shall promptly, and in any case within twentyforty-four eight (2448) hours inform IUCN the Secretariat through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred.

Processing of Personal Data. 15.1 16.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 IUCN 16.2 The Secretariat may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN Secretariat partners strictly involved in the implementation of the Project. The Consultant will have the right of access its Personal Data and the right to rectify any such Personal Data held by IUCNthe Secretariat. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN the Secretariat using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform). 15.3 IUCN 16.3 The Secretariat may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use of Personal Data to that strictly necessary for the performance of this Agreement and shall adopt all appropriate technical and organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Data. 15.4 16.4 Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCNthe Secretariat, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN the Secretariat for the performance of that other processor’s obligations. 15.5 16.5 Where the Secretariat’s Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 16.6 The Consultant shall promptly, and in any case within twentyforty-four eight (2448) hours inform IUCN the Secretariat through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred.

Processing of Personal Data. 15.1 16.1 Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. The Parties commit themselves to respect applicable data protection laws and regulations and process Personal Data in accordance with the terms of this Agreement. 15.2 IUCN may share Personal Data of the Consultant and / or Consultant Key Personnel with the Donor and other IUCN partners strictly involved in the implementation of the Project. The Consultant will have the right of access its Personal Data and the right to rectify any such Personal Data held by IUCN. If the Consultant has any queries concerning the processing of Personal Data, it shall address them to IUCN using the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform). 15.3 IUCN 16.2 Secretariat may in the course of performance of this Agreement provide the Consultant with Personal Data. The Consultant shall limit access and use Personal Data is any information relating to an identified or identifiable individual, unless otherwise defined under applicable law. 16.3 Any processing of Personal Data to that strictly necessary for shall be done in accordance with the performance terms of this the Agreement and the applicable law. In particular, it shall adopt all be processed in a manner that ensures the security of the Personal Data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical and or organizational security measures necessary to preserve the strictest confidentiality and limit access to Personal Datameasures. 15.4 16.4 Where the Consultant engages another processor for carrying out specific processing activities on behalf of IUCNSecretariat, the same data protection obligations as set out in this Agreement and the applicable law shall be imposed on that other processor by way of an agreement. Where that other processor fails to fulfil its data protection obligations, the Consultant shall remain fully liable to IUCN Secretariat for the performance of that other processor’s obligations. 15.5 16.5 Where Secretariat’s Personal Data is transferred to a country that has not been deemed to provide an adequate level of protection for Personal Data or to an International Organization within the meaning of Regulation (EU) 2016/679, the Consultant shall ensure that appropriate safeguards in accordance with applicable law are provided. 15.6 16.6 The Consultant shall promptly, and in any case within twentyforty-four eight (2448) hours inform IUCN Secretariat through the online form located at (▇▇▇▇▇://▇▇▇▇▇▇▇.▇▇▇▇.▇▇▇/dataprotection/requestform), if it determines and/or discloses to a competent public authority and/or affected data subjects that a Personal Data breach has occurred.