Personal Data Processing 2.1 The Processor shall process Personal Data only on the basis of corresponding recorded orders from the Controller. 2.2 By way of exception, in particular in urgent cases, processing orders from the Data Controller may also be made orally. In this case, the Data Controller shall confirm as soon as possible and in writing, by any appropriate means, the instructions given orally. 2.3 Where the processing concerns the transmission of Personal Data to a third country outside the European Union or to an international organization, the Data Processor shall also comply with the relevant instructions of the Data Controller, unless different legal requirements exist under European Union laws or the laws of the Member State to which the Data Processor is subject. In such a case, the Data Processor shall inform the Data Controller before processing of the legal requirement in question, unless the said law prohibits this kind of information for reasons of substantial public interest. 2.4 The transmission of Personal Data to a third country outside the European Union is prohibited unless the Data Controller has given prior explicit approval to that end, and one of the following conditions is met: • the European Commission has resolved that an adequate level of protection of personal data is ensured in the country the Personal Data is to be transmitted; • the transmission is to be made to the U.S.A.; and the recipient of the Personal Data has acceded to and abides by the Privacy Shield Framework; • the transmission will be governed by the standard data protection clauses issued by the European Commission. 2.5 The Data Processor shall inform the Data Controller immediately upon receipt of the order or as soon as possible if he / she determines that the content of a particular processing order violates the Regulation and / or national law and / or the law of another Member State of the European Union (EU), and / or other provisions of EU law on the protection of Personal Data. 2.6 The Data Processor acknowledges that the Data Controller has full control over her Personal Data and determines any particular feature of the processing to which the Personal Data will be submitted. If the Data Processor ignores the instructions of the Data Controller and determines alone the scope, the means and generally any other matter concerning the processing of Personal Data, she shall render herself the Data Controller for the purposes of implementing the Regulation and the legal framework on the protection of Personal Data. The practical consequence of this is that, in addition to the full responsibility of the Processor towards the Controller, she shall carry the same level of responsibility vis-à-vis the independent supervisory authority (and any other competent state authority) as well as the Natural Persons - Data Subjects of the data being processed.
Processing of Customer Personal Data 3.1 UKG will: 3.1.1 comply with all applicable Data Protection Laws in the Processing of Customer Personal Data; and 3.1.2 not Process Customer Personal Data other than for the purpose, and in accordance with, the relevant Customer’s instructions as documented in the Agreement and this DPA, unless Processing is required by the Data Protection Laws to which the relevant UKG Processor is subject, in which case UKG to the extent permitted by the Data Protection Laws, will inform Customer of that legal requirement before the Processing of that Customer Personal Data. 3.2 Customer hereby: 3.2.1 instructs UKG (and authorizes UKG to instruct each Subprocessor) to: (a) Process Customer Personal Data; and (b) in particular, transfer Customer Personal Data to any country or territory subject to the provisions of this DPA, in each case as reasonably necessary for the provision of the Services and consistent with the Agreement. 3.2.2 warrants and represents that it is and will at all relevant times remain duly and effectively authorized to give the instructions set out in Section 3.2.1 on behalf of each relevant Customer Affiliate; and 3.2.3 warrants and represents that it has all necessary rights in relation to the Customer Personal Data and/or has collected all necessary consents from Data Subjects to Process Customer Personal Data to the extent required by Applicable Law. 3.3 Schedule 1 to this DPA sets out certain information regarding UKG’s Processing of Customer Personal Data as required by Article 28(3) of the GDPR (and equivalent requirements of other Data Protection Laws).
Privacy and Personal Information We respect Your privacy and will only use and disclose Your personal information in accordance with the Australian Privacy Principles as set out in the Privacy Act 1988 (Cth) and in accordance with Our Privacy Policy. We will otherwise comply with all relevant privacy legislation in relation to Your personal information. Unless We are permitted to do otherwise under this Contract, We will keep Your information confidential. In particular We will keep Your information confidential unless: a) We have Your prior written consent; or b) the Law (including any regulatory, accounting, governmental, Ministerial or stock exchange requirement) requires or permits Us to disclose certain information; or c) We need to use the information for Our regulatory reporting or compliance, or in any legal or regulatory proceedings; or d) the information is already in the public domain; or e) We believe You have used electricity illegally and, as a result, We provide relevant information to the Economic Regulation Authority or the Director of Energy Safety; or f) We use the information for business purposes. g) You have not paid Your electricity bill, and We disclose information to a credit reporting agency, but We will not provide information about a default to a credit reporting agency if: (i) You have made a complaint in good faith about the default and the complaint has not been resolved; or (ii) You have requested Us to review Your electricity bill and the review is not yet completed. To ensure your information remains confidential, we will: 1) Provide Our staff with training around Australian Privacy Principles to ensure Your privacy is maintained; 2) Maintain up to date protection software for all electronically stored information; 3) Where possible, hold Your information on Our internal company network to minimise the risk of an electronic breach, or alternatively use secure, encrypted data centres; 4) Protect all of Our electronic data which contains Your information with passwords. The availability of these passwords will only be provided to staff that require access to the information for ongoing operational purposes; 5) Request that any third parties who require access to Your information provide assurances that they will comply with the Privacy Act; 6) Once no longer required for Our business or compliance purposes, We will destroy Your information as soon as practicable. For more information about Our Privacy Policy, visit Our website or call Us.
Processing Personal Data This ▇▇▇▇▇ shall be completed by the Controller, who may take account of the view of the Processors, however the final decision as to the content of this Annex shall be with the Buyer at its absolute discretion.
Personal Information 23.1 Subject to any applicable laws, the Licensee authorises ▇▇▇▇▇ to: 23.1.1 use any Personal Information that SAMRO for the purposes of processing, executing and administering the Agreement; calculating Licence Fees; collecting the Licence Fees; 23.1.2 informing the Licensee of any SAMRO news and information or information relating to the Agreement; 23.1.3 informing the Licensee of any amendment, Tariff amendment or General Amendment to this Agreement. 23.1.4 access the Licensees Personal Information from credit bureaux relating to the Licensees payment profile for purposes of financial risk assessment, fraud prevention and debtor tracing and that we may disclose the necessary Personal Information to any such credit bureaux. 23.1.5 obtain, capture store, process, analyse and use the Licensees personal information for SAMRO marketing purposes in relation to ▇▇▇▇▇’s business of managing its Repertoire.