Rights and duties of the Controller. 5.1. Externally, in particular to third parties and data subjects, the Controller is solely liable for the assessment of the lawfulness of the personal data processing and for the protection of the rights of data subjects. Nevertheless, as far as legally permissible, the Processor is obliged to forward all requests by data subjects to the Controller, as far as these are recognizably directed to the Controller. The Processor shall assist the Controller appropriately in answering requests from data subjects (such as rectification, erasure and restriction of processing) and is entitled to charge reasonable compensation for this. 5.2. The Controller is the owner of the Customer Data and, in the relationship of the parties to each other, holder of any rights to the Customer Data. 5.3. The Controller shall be responsible for providing the Customer Data to the Processor in right time for contractual performance under the Terms of Use. Further, the Controller shall be liable for the quality and lawfulness of collection of the Customer Data. The Controller must notify the Processor immediately and fully if it finds errors or irregularities regarding data protection regulations or its instructions when examining the results contracted. 5.4. In the event that a third party or data subject brings a claim directly against the Processor for violations of rights and/or related claims, the Controller undertakes to indemnify the Processor for all damages, costs/fees, including legal or other expenses or losses arising from the claim, to the extent that the Processor has notified the Controller of the assertion of the claim and has given it the opportunity to cooperate with the Processor in defending against the claim.
Appears in 2 contracts