{"component": "clause", "props": {"groups": [{"snippet": "Where one Party acting as a Controller discloses Personal Data to the other Party to Process as a Processor or Subprocessor on its behalf, the Party acting as a Processor or Subprocessor shall:\n4.1 Process the Personal Data only in accordance with the Controller\u2019s instructions, unless required to do so by applicable law. Any additional or alternate Processing instructions not contained in this Schedule must be agreed between the Parties in writing, including the costs (if any) associated with complying with such instructions. Neither Party is responsible for determining if the Controller\u2019s instructions are compliant with applicable law. However, if either Party is of the opinion that a Controller instruction infringes applicable Privacy Laws, that Party shall notify the other as soon as reasonably practicable and shall not be required to comply with such infringing instruction. Details of the subject matter of the Processing, its duration, nature and purpose, and the type of Personal Data and data subjects are as specified in the Agreement and Annex 2.\n4.2 Process the Personal Data provided by the Controller only to the extent necessary to perform its obligations under the Agreement;\n4.3 Not disclose the Personal Data to any third party (other than an Affiliate or Subprocessor) except as necessary and only for the purposes of:\n(a) complying with the Controller\u2019s instructions;\n(b) complying with this Schedule; or\n(c) complying with the law or a binding order of a governmental body. Unless it would violate the law or a binding order of a governmental body, Processor will give the Controller notice of any legal requirement or order referenced in this provision;\n4.4 Upon becoming aware of a Personal Data Breach, (i) notify the Controller without undue delay (and in any event within 72 hours); (ii) provide written details of the Personal Data Breach to the extent such information is known or available to the Processor at the time; and (iii) use reasonable efforts to assist the other Party in mitigating where possible, the adverse effects of any Personal Data Breach; and (iv) implement all measures required by Privacy Laws in case of such Personal Data Breach.\n4.5 Upon reasonable prior written request, provide the Controller with such information as may be reasonably necessary under applicable law to demonstrate Processor\u2019s compliance with this Schedule;\n4.6 Upon reasonable prior notice, provide reasonably requested assistance to the Controller to carry out data protection impact assessments and/or prior consultations to the extent required by Privacy Laws in relation to the Processing of Personal Data by that Party as a Processor;\n4.7 Promptly notify Controller of, and cooperate with the Controller to address, any requests from individuals or applicable data protection authorities relating to the Processing of Personal Data under the Agreement, including requests from individuals seeking to exercise their rights under any applicable Privacy Laws. Processor shall not respond to such communications directly without Controller\u2019 prior authorization, unless legally compelled to do so;\n4.8 At the expiry or termination of the Agreement, or otherwise at Controller\u2019s option (as may be requested in writing), delete or return all Personal Data to Controller as soon as reasonably practicable, except where the Processor is required to retain copies under applicable law, in which case Processor will limit and protect that Personal Data from any further Processing except to the extent required by applicable law;\n4.9 If either Party is Processing Personal Data within the scope of the CCPA, that Party shall Process Personal Data on behalf of the other Party only and will not retain, use, share or disclose that Personal Data for any purpose other than for the purposes set out in this Schedule, the Agreement and as permitted under the CCPA or any subsequent law. In no event will either Party share any Personal Data with third parties (except to Subprocessors in accordance with clause 5 below) or sell any Personal Data. Each Party certifies that it understands and will comply with all restrictions placed on its\u2019 Processing of Personal Data, including by avoiding any action that would cause the other Party to be deemed to have sold Personal Data or Personal Information under the CCPA. For purposes of this paragraph, Processors hereunder will be considered Service Providers as defined in Section 1798.140 (v) of the CCPA; and\n4.10 Upon reasonable prior written request from the other Party (such request to be made in accordance with the terms of the Agreement), provide such information as may be reasonably necessary to demonstrate compliance with the Processor\u2019s obligations under this Schedule and allow for and contribute to audits, including inspections, conducted by the other Party or another auditor mandated by that Party.", "snippet_links": [{"key": "where-one-party", "type": "clause", "offset": [0, 15]}, {"key": "other-party", "type": "definition", "offset": [70, 81]}, {"key": "the-party", "type": "clause", "offset": [139, 148]}, {"key": "the-personal-data", "type": "definition", "offset": [206, 223]}, {"key": "in-accordance-with", "type": "definition", "offset": [229, 247]}, {"key": "applicable-law", "type": "clause", "offset": [307, 321]}, {"key": "processing-instructions", "type": "definition", "offset": [351, 374]}, {"key": "contained-in", "type": "definition", "offset": [379, 391]}, {"key": "agreed-between-the-parties", "type": "clause", "offset": [414, 440]}, {"key": "in-writing", "type": "clause", "offset": [441, 451]}, {"key": "associated-with", "type": "definition", "offset": [482, 497]}, {"key": "complying-with", "type": "clause", "offset": [498, 512]}, {"key": "neither-party", "type": "definition", "offset": [532, 545]}, {"key": "responsible-for", "type": "clause", "offset": [549, 564]}, {"key": "if-either-party", "type": "clause", "offset": [654, 669]}, {"key": "applicable-privacy-laws", "type": "clause", "offset": [728, 751]}, {"key": "notify-the", "type": "clause", "offset": [770, 780]}, {"key": "comply-with", "type": "definition", "offset": [850, 861]}, {"key": "subject-matter-of-the-processing", "type": "clause", "offset": [906, 938]}, {"key": "its-duration", "type": "clause", "offset": [940, 952]}, {"key": "nature-and-purpose", "type": "clause", "offset": [954, 972]}, {"key": "personal-data-and-data-subjects", "type": "clause", "offset": [990, 1021]}, {"key": "as-specified", "type": "clause", "offset": [1026, 1038]}, {"key": "in-the-agreement", "type": "clause", "offset": [1039, 1055]}, {"key": "annex-2", "type": "definition", "offset": [1060, 1067]}, {"key": "personal-data-provided", "type": "clause", "offset": [1085, 1107]}, {"key": "obligations-under-the-agreement", "type": "clause", "offset": [1170, 1201]}, {"key": "third-party", "type": "clause", "offset": [1245, 1256]}, {"key": "an-affiliate", "type": "clause", "offset": [1269, 1281]}, {"key": "for-the-purposes-of", "type": "clause", "offset": [1328, 1347]}, {"key": "the-law", "type": "clause", "offset": [1455, 1462]}, {"key": "order-of", "type": "clause", "offset": [1476, 1484]}, {"key": "governmental-body", "type": "definition", "offset": [1487, 1504]}, {"key": "notice-of-any", "type": "clause", "offset": [1616, 1629]}, {"key": "legal-requirement", "type": "clause", "offset": [1630, 1647]}, {"key": "personal-data-breach", "type": "definition", "offset": [1716, 1736]}, {"key": "without-undue-delay", "type": "definition", "offset": [1764, 1783]}, {"key": "such-information", "type": "definition", "offset": [1891, 1907]}, {"key": "available-to", "type": "definition", "offset": [1920, 1932]}, {"key": "the-processor", "type": "definition", "offset": [1933, 1946]}, {"key": "at-the-time", "type": "definition", "offset": [1947, 1958]}, {"key": "reasonable-efforts", "type": "definition", "offset": [1974, 1992]}, {"key": "assist-the", "type": "clause", "offset": [1996, 2006]}, {"key": "adverse-effects", "type": "definition", "offset": [2053, 2068]}, {"key": "required-by", "type": "definition", "offset": [2130, 2141]}, {"key": "in-case-of", "type": "clause", "offset": [2155, 2165]}, {"key": "upon-reasonable", "type": "clause", "offset": [2197, 2212]}, {"key": "written-request", "type": "clause", "offset": [2219, 2234]}, {"key": "provide-the", "type": "clause", "offset": [2236, 2247]}, {"key": "reasonably-necessary", "type": "clause", "offset": [2291, 2311]}, {"key": "prior-notice", "type": "definition", "offset": [2411, 2423]}, {"key": "assistance-to-the-controller", "type": "clause", "offset": [2454, 2482]}, {"key": "data-protection-impact-assessments", "type": "clause", "offset": [2496, 2530]}, {"key": "prior-consultations", "type": "clause", "offset": [2538, 2557]}, {"key": "in-relation-to", "type": "clause", "offset": [2597, 2611]}, {"key": "processing-of-personal-data-by", "type": "clause", "offset": [2616, 2646]}, {"key": "promptly-notify", "type": "definition", "offset": [2678, 2693]}, {"key": "cooperate-with", "type": "clause", "offset": [2713, 2727]}, {"key": "requests-from-individuals", "type": "clause", "offset": [2759, 2784]}, {"key": "data-protection-authorities", "type": "definition", "offset": [2799, 2826]}, {"key": "relating-to", "type": "definition", "offset": [2827, 2838]}, {"key": "to-exercise", "type": "clause", "offset": [2936, 2947]}, {"key": "respond-to", "type": "definition", "offset": [3016, 3026]}, {"key": "prior-authorization", "type": "definition", "offset": [3076, 3095]}, {"key": "termination-of-the-agreement", "type": "clause", "offset": [3153, 3181]}, {"key": "delete-or-return", "type": "clause", "offset": [3253, 3269]}, {"key": "all-personal-data", "type": "definition", "offset": [3270, 3287]}, {"key": "further-processing", "type": "clause", "offset": [3490, 3508]}, {"key": "except-to-the-extent", "type": "clause", "offset": [3509, 3529]}, {"key": "processing-personal-data", "type": "definition", "offset": [3581, 3605]}, {"key": "scope-of-the", "type": "clause", "offset": [3617, 3629]}, {"key": "process-personal-data", "type": "definition", "offset": [3653, 3674]}, {"key": "on-behalf-of", "type": "definition", "offset": [3675, 3687]}, {"key": "set-out", "type": "definition", "offset": [3816, 3823]}, {"key": "subsequent-law", "type": "clause", "offset": [3895, 3909]}, {"key": "in-no-event-will-either", "type": "clause", "offset": [3911, 3934]}, {"key": "party-share", "type": "definition", "offset": [3935, 3946]}, {"key": "with-third-parties", "type": "clause", "offset": [3965, 3983]}, {"key": "clause-5", "type": "definition", "offset": [4028, 4036]}, {"key": "each-party", "type": "definition", "offset": [4071, 4081]}, {"key": "any-action", "type": "definition", "offset": [4216, 4226]}, {"key": "have-sold", "type": "definition", "offset": [4276, 4285]}, {"key": "personal-data-or-personal-information", "type": "definition", "offset": [4286, 4323]}, {"key": "for-purposes-of-this", "type": "clause", "offset": [4340, 4360]}, {"key": "service-providers", "type": "definition", "offset": [4412, 4429]}, {"key": "defined-in-section", "type": "clause", "offset": [4433, 4451]}, {"key": "the-terms-of-the-agreement", "type": "clause", "offset": [4590, 4616]}, {"key": "compliance-with-the", "type": "clause", "offset": [4690, 4709]}], "samples": [{"hash": "2RGClh4Z49s", "uri": "/contracts/2RGClh4Z49s#controller-to-processor", "label": "Reseller Terms of Sale", "score": 35.6893386841, "published": true}, {"hash": "6xBbjpXqLD3", "uri": "/contracts/6xBbjpXqLD3#controller-to-processor", "label": "Reseller Terms of Sale", "score": 35.0043716431, "published": true}, {"hash": "5bab6SAkLNa", "uri": "/contracts/5bab6SAkLNa#controller-to-processor", "label": "Reseller Terms of Sale", "score": 35.0043716431, "published": true}], "size": 31, "hash": "5a3798869c6ba6c96250019a4009f61e", "id": 1}, {"snippet": "SECTION I", "snippet_links": [{"key": "section-i", "type": "definition", "offset": [0, 9]}], "samples": [{"hash": "g4gMoUENyx7", "uri": "/contracts/g4gMoUENyx7#controller-to-processor", "label": "Support Agreement", "score": 35.2034797668, "published": true}, {"hash": "49KTvkVeT8", "uri": "/contracts/49KTvkVeT8#controller-to-processor", "label": "Data Processing Addendum", "score": 32.8363761902, "published": true}, {"hash": "jegBBCYkajh", "uri": "/contracts/jegBBCYkajh#controller-to-processor", "label": "Data Processing Agreement", "score": 27.8213558197, "published": true}], "size": 6, "hash": "e5e6eac22a01aefd710a6eb5ac55f640", "id": 2}, {"snippet": "The Parties agree that, in accordance with Applicable Data Protection Law, Company is the Controller of the Personal Data transferred by Company to UiPath by using the Services.", "snippet_links": [{"key": "the-parties-agree-that", "type": "clause", "offset": [0, 22]}, {"key": "in-accordance-with", "type": "definition", "offset": [24, 42]}, {"key": "applicable-data-protection-law", "type": "clause", "offset": [43, 73]}, {"key": "the-controller", "type": "clause", "offset": [86, 100]}, {"key": "the-personal-data", "type": "definition", "offset": [104, 121]}, {"key": "by-company", "type": "clause", "offset": [134, 144]}, {"key": "using-the-services", "type": "clause", "offset": [158, 176]}], "samples": [{"hash": "2DwUholJCRZ", "uri": "/contracts/2DwUholJCRZ#controller-to-processor", "label": "Data Processing Agreement", "score": 36.0718955994, "published": true}, {"hash": "9w5RRt5stx4", "uri": "/contracts/9w5RRt5stx4#controller-to-processor", "label": "Data Processing Agreement", "score": 35.4819259644, "published": true}, {"hash": "3Zyc3mdpK7N", "uri": "/contracts/3Zyc3mdpK7N#controller-to-processor", "label": "Data Processing Agreement", "score": 34.3010787964, "published": true}], "size": 6, "hash": "f450ab5bc33d3a42312252605fc105c1", "id": 3}, {"snippet": "The Parties agree that, in accordance with the Applicable Data Protection Legislation, UiPath is a controller of Personal Data who entrusts the processing of Personal Data to the Vendor, which acts as a processor. The Personal Data processing shall be performed under and within the Controller\u2019s written instructions.", "snippet_links": [{"key": "the-parties-agree-that", "type": "clause", "offset": [0, 22]}, {"key": "in-accordance-with", "type": "definition", "offset": [24, 42]}, {"key": "applicable-data-protection-legislation", "type": "definition", "offset": [47, 85]}, {"key": "the-processing-of-personal-data", "type": "clause", "offset": [140, 171]}, {"key": "the-vendor", "type": "definition", "offset": [175, 185]}, {"key": "personal-data-processing", "type": "definition", "offset": [218, 242]}, {"key": "the-controller", "type": "clause", "offset": [279, 293]}, {"key": "written-instructions", "type": "clause", "offset": [296, 316]}], "samples": [{"hash": "23FXsQEErYm", "uri": "/contracts/23FXsQEErYm#controller-to-processor", "label": "Data Processing Agreement", "score": 36.1027679443, "published": true}, {"hash": "gebz1v6r3lB", "uri": "/contracts/gebz1v6r3lB#controller-to-processor", "label": "Data Processing Agreement", "score": 28.0896644592, "published": true}], "size": 4, "hash": "7fc91c3d4a62a21f1032b229bd4cf96e", "id": 4}, {"snippet": "3.1. The terms of this Condition 3 shall apply to the extent that: (i) the Customer acts as a controller of personal data it discloses to the Supplier in connection with the Contract and the Supplier acts as a processor in relation to the personal data; or (ii) the Customer acts as a processor of personal data it discloses to the Supplier in connection with the Contract and the Supplier acts as a Sub-processor of the Customer in relation to the personal data.", "snippet_links": [{"key": "terms-of", "type": "definition", "offset": [9, 17]}, {"key": "condition-3", "type": "clause", "offset": [23, 34]}, {"key": "to-the-extent", "type": "clause", "offset": [47, 60]}, {"key": "customer-acts", "type": "clause", "offset": [75, 88]}, {"key": "to-the-supplier", "type": "clause", "offset": [135, 150]}, {"key": "in-connection-with", "type": "clause", "offset": [151, 169]}, {"key": "the-contract", "type": "definition", "offset": [170, 182]}, {"key": "in-relation-to", "type": "clause", "offset": [220, 234]}, {"key": "the-personal-data", "type": "definition", "offset": [235, 252]}, {"key": "a-sub", "type": "clause", "offset": [398, 403]}, {"key": "of-the-customer", "type": "clause", "offset": [414, 429]}], "samples": [{"hash": "8cgzBRTq01m", "uri": "/contracts/8cgzBRTq01m#controller-to-processor", "label": "General Terms of Sale", "score": 34.7607269287, "published": true}, {"hash": "2VECdHlskjf", "uri": "/contracts/2VECdHlskjf#controller-to-processor", "label": "General Terms of Sale", "score": 34.375164032, "published": true}], "size": 2, "hash": "579bb534794509bef68106b82b43cc53", "id": 5}, {"snippet": "You agree to the terms of the Data Processing Addendum set forth at \u2587\u2587\u2587.\u2587\u2587\u2587\u2587\u2587\u2587\u2587.\u2587\u2587\u2587/\u2587\u2587\u2587\u2587\u2587 where you are a Controller and the Company is Processor as it pertains to all Reseller Services that are not Registration Services subject to the GDPR.", "snippet_links": [{"key": "you-agree-to", "type": "clause", "offset": [0, 12]}, {"key": "data-processing-addendum", "type": "clause", "offset": [30, 54]}, {"key": "and-the-company", "type": "clause", "offset": [117, 132]}, {"key": "reseller-services", "type": "clause", "offset": [168, 185]}, {"key": "registration-services", "type": "definition", "offset": [199, 220]}, {"key": "the-gdpr", "type": "definition", "offset": [232, 240]}], "samples": [{"hash": "jcupNfhn0LB", "uri": "/contracts/jcupNfhn0LB#controller-to-processor", "label": "Reseller Agreement", "score": 26.0759754181, "published": true}, {"hash": "h0Mph8gI7ab", "uri": "/contracts/h0Mph8gI7ab#controller-to-processor", "label": "Reseller Agreement", "score": 25.7830257416, "published": true}], "size": 2, "hash": "5a41aeab0c1c5b6df6580fbeb5b3ca7f", "id": 6}, {"snippet": "The Parties agree that, in accordance with the Applicable Data Protection Law, the Company is the Controller of the Personal Data transferred by the Company to the Processor by using the Cloud Services.", "snippet_links": [{"key": "the-parties-agree-that", "type": "clause", "offset": [0, 22]}, {"key": "in-accordance-with", "type": "definition", "offset": [24, 42]}, {"key": "applicable-data-protection-law", "type": "clause", "offset": [47, 77]}, {"key": "the-controller", "type": "clause", "offset": [94, 108]}, {"key": "the-personal-data", "type": "definition", "offset": [112, 129]}, {"key": "by-the-company", "type": "clause", "offset": [142, 156]}, {"key": "the-processor", "type": "definition", "offset": [160, 173]}, {"key": "cloud-services", "type": "clause", "offset": [187, 201]}], "samples": [{"hash": "fBQGjzJWhYx", "uri": "/contracts/fBQGjzJWhYx#controller-to-processor", "label": "Data Processing Agreement", "score": 31.7017726898, "published": true}, {"hash": "5qsHW54in3Y", "uri": "/contracts/5qsHW54in3Y#controller-to-processor", "label": "Data Processing Agreement", "score": 26.8877487183, "published": true}], "size": 2, "hash": "2778e9f5e48719e95dfe4697fbd33433", "id": 7}, {"snippet": "Without prejudice to the meaning afforded to each party under the Data Protection Laws, the intention of the parties is that in respect of any Personal Data Processed by the Contractor under this Contract, the Purchaser shall be the Data Controller and the Contractor shall be a Data Processor.", "snippet_links": [{"key": "without-prejudice-to-the", "type": "clause", "offset": [0, 24]}, {"key": "each-party", "type": "definition", "offset": [45, 55]}, {"key": "data-protection-laws", "type": "definition", "offset": [66, 86]}, {"key": "the-intention-of-the-parties", "type": "clause", "offset": [88, 116]}, {"key": "in-respect-of", "type": "clause", "offset": [125, 138]}, {"key": "personal-data-processed", "type": "clause", "offset": [143, 166]}, {"key": "by-the-contractor", "type": "clause", "offset": [167, 184]}, {"key": "under-this-contract", "type": "clause", "offset": [185, 204]}, {"key": "the-purchaser-shall", "type": "clause", "offset": [206, 225]}, {"key": "the-data-controller", "type": "definition", "offset": [229, 248]}, {"key": "the-contractor-shall", "type": "clause", "offset": [253, 273]}, {"key": "data-processor", "type": "definition", "offset": [279, 293]}], "samples": [{"hash": "gbPaBLRTt2t", "uri": "/contracts/gbPaBLRTt2t#controller-to-processor", "label": "Agreement for the Supply of Goods and Services", "score": 32.2324333191, "published": true}, {"hash": "1OpsapB0vpl", "uri": "/contracts/1OpsapB0vpl#controller-to-processor", "label": "Supply of Goods and Services Agreement", "score": 32.1776885986, "published": true}], "size": 2, "hash": "ee9a1b5c978558b7a6dd3e28eb854a8c", "id": 8}, {"snippet": "The module two: Transfers Controller to Processor of the EEA Transfer Clauses shall be deemed completed as follows:\ni. Optional Clause 7 (\u201cDocking clause\u201d) shall be deemed incorporated.\nii. In Clause 9(a) (\u201cUse of sub-processors\u201d), the parties choose Option 2, 'General Written Authorisation', with a time period subject to Section 3.k.ii. of the DPA.\niii. In Clause 11(a) (\u201cRedress\u201d), optional wording shall not be deemed incorporated.\niv. In Clause 17 (\u201cGoverning law\u201d), the parties choose Option 1 and agree that EEA Transfer Clauses shall be governed by the law of the EEA Member State where the data exporter is established.\nv. In Clause 18 (\u201cChoice of forum and jurisdiction\u201d), the parties agree that any disputes arising from EEA Transfer Clauses shall be resolved by the courts of the EEA Member State where the data exporter is established.\nvi. Annex I.A (\u201cList of parties\u201d) and I.B (\u201cDescription of transfer\u201d) shall be deemed completed with the information set out in Section 1.c. of this Annex 4a and in the Annex 1 to this DPA.\nvii. Annex I.B (\u201cDescription of transfer\u201d) shall be deemed completed with the information set out in Annex 1 to this DPA.\nviii. For the purpose of Annex I.C (\u201cCompetent supervisory authority\u201d), the competent supervisory authority shall be that of the EEA Member State where the data exporter is established.\nix. If the data exporter is not established in the EEA and personal data sharing under this DPA is subject to the EEA Transfer Clauses by virtue of the extraterritorial application of the GDPR, or an onward transfer, the 1) applicable governing law under Section 2.a.iv.; 2) courts under Section 2.a.v.; and 3) competent authority under Section 2.a.viii of this Annex 4a to the DPA shall be those of the EEA Member State identified in the original EEA Transfer Clauses which the data exporter is subject to. Data exporter shall notify data importer of such EEA Member State upon request.\nx. \u2587\u2587\u2587\u2587\u2587 \u2587\u2587 (\u201cTechnical and organizational measures\u201d) shall be deemed completed with the information set out in Annex 3 to this DPA.\nxi. \u2587\u2587\u2587\u2587\u2587 \u2587\u2587\u2587 (\u201cList of sub-processors\u201d) shall be deemed completed with the information set out in Annex 2 to this DPA.", "snippet_links": [{"key": "module-two", "type": "definition", "offset": [4, 14]}, {"key": "transfer-clauses", "type": "clause", "offset": [61, 77]}, {"key": "clause-7", "type": "definition", "offset": [128, 136]}, {"key": "docking-clause", "type": "clause", "offset": [139, 153]}, {"key": "in-clause", "type": "clause", "offset": [190, 199]}, {"key": "use-of-sub", "type": "clause", "offset": [207, 217]}, {"key": "option-2", "type": "clause", "offset": [251, 259]}, {"key": "general-written-authorisation", "type": "definition", "offset": [262, 291]}, {"key": "time-period", "type": "clause", "offset": [301, 312]}, {"key": "subject-to-section", "type": "clause", "offset": [313, 331]}, {"key": "clause-17", "type": "definition", "offset": [444, 453]}, {"key": "option-1", "type": "clause", "offset": [492, 500]}, {"key": "the-law", "type": "clause", "offset": [558, 565]}, {"key": "eea-member-state", "type": "definition", "offset": [573, 589]}, {"key": "data-exporter", "type": "clause", "offset": [600, 613]}, {"key": "clause-18", "type": "clause", "offset": [636, 645]}, {"key": "choice-of-forum-and-jurisdiction", "type": "clause", "offset": [648, 680]}, {"key": "the-parties-agree-that", "type": "clause", "offset": [684, 706]}, {"key": "list-of-parties", "type": "clause", "offset": [866, 881]}, {"key": "description-of-transfer", "type": "clause", "offset": [894, 917]}, {"key": "the-information", "type": "clause", "offset": [951, 966]}, {"key": "set-out", "type": "definition", "offset": [967, 974]}, {"key": "this-annex", "type": "clause", "offset": [994, 1004]}, {"key": "annex-1", "type": "definition", "offset": [1019, 1026]}, {"key": "for-the-purpose-of", "type": "definition", "offset": [1168, 1186]}, {"key": "competent-supervisory-authority", "type": "clause", "offset": [1199, 1230]}, {"key": "not-established", "type": "definition", "offset": [1376, 1391]}, {"key": "data-sharing", "type": "clause", "offset": [1416, 1428]}, {"key": "subject-to-the", "type": "clause", "offset": [1447, 1461]}, {"key": "the-gdpr", "type": "definition", "offset": [1532, 1540]}, {"key": "onward-transfer", "type": "definition", "offset": [1548, 1563]}, {"key": "applicable-governing-law", "type": "clause", "offset": [1572, 1596]}, {"key": "competent-authority", "type": "definition", "offset": [1659, 1678]}, {"key": "to-the-dpa", "type": "clause", "offset": [1719, 1729]}, {"key": "the-original", "type": "clause", "offset": [1783, 1795]}, {"key": "data-importer", "type": "clause", "offset": [1883, 1896]}, {"key": "upon-request", "type": "definition", "offset": [1922, 1934]}, {"key": "technical-and-organizational-measures", "type": "clause", "offset": [1950, 1987]}, {"key": "annex-3", "type": "definition", "offset": [2048, 2055]}, {"key": "annex-2", "type": "definition", "offset": [2168, 2175]}], "samples": [{"hash": "dTYBy92Zwz5", "uri": "/contracts/dTYBy92Zwz5#controller-to-processor", "label": "Data Processing Addendum", "score": 36.2168579102, "published": true}, {"hash": "lAbL1Be4prK", "uri": "/contracts/lAbL1Be4prK#controller-to-processor", "label": "Data Processing Addendum", "score": 36.1937446594, "published": true}], "size": 2, "hash": "a5fea2a0a3b01bb40ce081c70b241b67", "id": 9}, {"snippet": "Where one Party acting as a Controller discloses Personal Data to the other Party to Process as a Processor or Subprocessor on its behalf, the Party acting as a Processor or Subprocessor shall:\n4.1 Process the Personal Data only in accordance with the Controller\u2019s instructions, unless required to do so by applicable law. Any additional or alternate Processing instructions not contained in this Schedule must be agreed between the Parties in writing, including the costs (if any) associated with complying with such instructions. Neither Party is responsible for determining if the Controller\u2019s instructions are compliant with applicable law. However, if either Party is of the opinion that a Controller instruction infringes applicable Privacy Laws, that Party shall notify the other as soon as reasonably practicable and shall not be required to comply with such infringing instruction. Details of the subject matter of the Processing, its duration, nature and purpose, and the type of Personal Data and data subjects are as specified in the Agreement and Annex 2.", "snippet_links": [{"key": "where-one-party", "type": "clause", "offset": [0, 15]}, {"key": "other-party", "type": "definition", "offset": [70, 81]}, {"key": "the-party", "type": "clause", "offset": [139, 148]}, {"key": "the-personal-data", "type": "definition", "offset": [206, 223]}, {"key": "in-accordance-with", "type": "definition", "offset": [229, 247]}, {"key": "the-controller", "type": "clause", "offset": [248, 262]}, {"key": "applicable-law", "type": "clause", "offset": [307, 321]}, {"key": "processing-instructions", "type": "definition", "offset": [351, 374]}, {"key": "contained-in", "type": "definition", "offset": [379, 391]}, {"key": "agreed-between-the-parties", "type": "clause", "offset": [414, 440]}, {"key": "in-writing", "type": "clause", "offset": [441, 451]}, {"key": "associated-with", "type": "definition", "offset": [482, 497]}, {"key": "complying-with", "type": "clause", "offset": [498, 512]}, {"key": "neither-party", "type": "definition", "offset": [532, 545]}, {"key": "responsible-for", "type": "clause", "offset": [549, 564]}, {"key": "if-either-party", "type": "clause", "offset": [654, 669]}, {"key": "applicable-privacy-laws", "type": "clause", "offset": [728, 751]}, {"key": "notify-the", "type": "clause", "offset": [770, 780]}, {"key": "comply-with", "type": "definition", "offset": [850, 861]}, {"key": "subject-matter-of-the-processing", "type": "clause", "offset": [906, 938]}, {"key": "its-duration", "type": "clause", "offset": [940, 952]}, {"key": "nature-and-purpose", "type": "clause", "offset": [954, 972]}, {"key": "personal-data-and-data-subjects", "type": "clause", "offset": [990, 1021]}, {"key": "as-specified", "type": "clause", "offset": [1026, 1038]}, {"key": "in-the-agreement", "type": "clause", "offset": [1039, 1055]}, {"key": "annex-2", "type": "definition", "offset": [1060, 1067]}], "samples": [{"hash": "ewSPCBc2VXI", "uri": "/contracts/ewSPCBc2VXI#controller-to-processor", "label": "Reseller Terms of Sale", "score": 35.0043716431, "published": true}], "size": 1, "hash": "bd0ca32cca9552fa7f0dedcab2114034", "id": 10}], "next_curs": "CmASWmoVc35sYXdpbnNpZGVyY29udHJhY3RzcjwLEhZDbGF1c2VTbmlwcGV0R3JvdXBfdjU2IiBjb250cm9sbGVyLXRvLXByb2Nlc3NvciMwMDAwMDAwYQyiAQJlbhgAIAA=", "clause": {"title": "Controller to Processor", "children": [["", ""], ["details-of-the", "Details of the"], ["annex-i-of-the-eu-standard", "Annex I of the EU Standard"], ["defined-terms", "DEFINED TERMS"], ["users", "USERS"]], "parents": [["notices", "Notices"], ["general", "General"], ["object-of-the-dpa", "Object of the Dpa"], ["schedules", "Schedules"], ["health-and-safety", "Health and Safety"]], "size": 66, "id": "controller-to-processor", "related": [["data-controller", "Data Controller", "Data Controller"], ["sub-processor", "Sub-processor", "Sub-processor"], ["authorized-sub-processors", "Authorized Sub-processors", "Authorized Sub-processors"], ["fire-department-service-charge", "Fire Department Service Charge", "Fire Department Service Charge"], ["construction-administration", "Construction Administration", "Construction Administration"]], "related_snippets": [], "updated": "2025-07-10T04:27:38+00:00", "also_ask": [], "drafting_tip": null, "explanation": "The 'Controller to Processor' clause defines the relationship and responsibilities between a data controller and a data processor in the context of handling personal data. It typically outlines the processor's obligations to act only on the controller's instructions, maintain data security, and assist the controller in complying with data protection laws. This clause ensures that personal data is processed lawfully and securely, clarifying roles and reducing the risk of unauthorized or improper data use."}, "json": true, "cursor": ""}}