Common use of Controller to Processor Clause in Contracts

Controller to Processor. The module two: Transfers Controller to Processor of the EEA Transfer Clauses shall be deemed completed as follows: i. Optional Clause 7 (“Docking clause”) shall be deemed incorporated. ii. In Clause 9(a) (“Use of sub-processors”), the parties choose Option 2, 'General Written Authorisation', with a time period subject to Section 3.k.ii. of the DPA. iii. In Clause 11(a) (“Redress”), optional wording shall not be deemed incorporated. iv. In Clause 17 (“Governing law”), the parties choose Option 1 and agree that EEA Transfer Clauses shall be governed by the law of the EEA Member State where the data exporter is established. v. In Clause 18 (“Choice of forum and jurisdiction”), the parties agree that any disputes arising from EEA Transfer Clauses shall be resolved by the courts of the EEA Member State where the data exporter is established. vi. Annex I.A (“List of parties”) and I.B (“Description of transfer”) shall be deemed completed with the information set out in Section 1.c. of this Annex 4a and in the Annex 1 to this DPA. vii. Annex I.B (“Description of transfer”) shall be deemed completed with the information set out in Annex 1 to this DPA. viii. For the purpose of Annex I.C (“Competent supervisory authority”), the competent supervisory authority shall be that of the EEA Member State where the data exporter is established. ix. If the data exporter is not established in the EEA and personal data sharing under this DPA is subject to the EEA Transfer Clauses by virtue of the extraterritorial application of the GDPR, or an onward transfer, the 1) applicable governing law under Section 2.a.iv.; 2) courts under Section 2.a.v.; and 3) competent authority under Section 2.a.viii of this Annex 4a to the DPA shall be those of the EEA Member State identified in the original EEA Transfer Clauses which the data exporter is subject to. Data exporter shall notify data importer of such EEA Member State upon request. x. ▇▇▇▇▇ ▇▇ (“Technical and organizational measures”) shall be deemed completed with the information set out in Annex 3 to this DPA. xi. ▇▇▇▇▇ ▇▇▇ (“List of sub-processors”) shall be deemed completed with the information set out in Annex 2 to this DPA.