{"component": "clause", "props": {"groups": [{"size": 18, "snippet_links": [{"key": "the-sponsor", "type": "clause", "offset": [0, 11]}, {"key": "the-data-controller", "type": "definition", "offset": [21, 40]}, {"key": "personal-data", "type": "clause", "offset": [50, 63]}, {"key": "this-agreement", "type": "clause", "offset": [125, 139]}, {"key": "manner-of", "type": "clause", "offset": [147, 156]}, {"key": "to-the-extent", "type": "clause", "offset": [237, 250]}, {"key": "applicable-data-protection-legislation", "type": "definition", "offset": [326, 364]}, {"key": "or-equivalent", "type": "definition", "offset": [388, 401]}, {"key": "national-legislation", "type": "clause", "offset": [410, 430]}, {"key": "the-investigator", "type": "clause", "offset": [480, 496]}, {"key": "study-staff", "type": "definition", "offset": [501, 512]}, {"key": "in-accordance-with", "type": "clause", "offset": [584, 602]}, {"key": "the-data-protection-legislation", "type": "definition", "offset": [603, 634]}], "snippet": "The Sponsor shall be the data controller for such personal data except that, if Quintiles deals with any personal data under this Agreement in the manner of a data controller, Quintiles shall be the data controller of such personal data to the extent of such dealings. Quintiles may process \"personal data\", as defined in the applicable data protection legislation enacted under the same or equivalent/similar national legislation (collectively \"Data Protection Legislation\"), of the Investigator and Study Staff for study-related purposes and all such processing will be carried out in accordance with the Data Protection Legislation.", "samples": [{"hash": "4vDxQ61pMgJ", "uri": "/contracts/4vDxQ61pMgJ#data-controller", "label": "Clinical Trial Agreement", "score": 29.1099586487, "published": true}, {"hash": "dI4DHvlmYlc", "uri": "/contracts/dI4DHvlmYlc#data-controller", "label": "Clinical Trial Agreement", "score": 27.2786598206, "published": true}, {"hash": "jKAfRF5iFjq", "uri": "/contracts/jKAfRF5iFjq#data-controller", "label": "Clinical Trial Agreement", "score": 27.163690567, "published": true}], "hash": "f83d232ea3741d03bbc814bef244a132", "id": 1}, {"size": 6, "snippet_links": [{"key": "spr\u00e1vce-\u00fadaj\u016f", "type": "clause", "offset": [4, 17]}, {"key": "the-sponsor", "type": "clause", "offset": [18, 29]}, {"key": "the-data-controller", "type": "definition", "offset": [39, 58]}, {"key": "personal-data", "type": "clause", "offset": [68, 81]}, {"key": "this-agreement", "type": "clause", "offset": [139, 153]}, {"key": "manner-of", "type": "clause", "offset": [161, 170]}, {"key": "to-the-extent", "type": "clause", "offset": [247, 260]}, {"key": "applicable-data-protection-legislation", "type": "definition", "offset": [626, 664]}, {"key": "or-equivalent", "type": "definition", "offset": [688, 701]}, {"key": "national-legislation", "type": "clause", "offset": [710, 730]}, {"key": "the-investigator", "type": "clause", "offset": [780, 796]}, {"key": "study-staff", "type": "definition", "offset": [801, 812]}, {"key": "in-accordance-with", "type": "clause", "offset": [884, 902]}, {"key": "the-data-protection-legislation", "type": "definition", "offset": [903, 934]}, {"key": "osobn\u00ed-\u00fadaje", "type": "clause", "offset": [967, 979]}], "snippet": "6.3 Spr\u00e1vce \u00fadaj\u016f The Sponsor shall be the data controller for such personal data except that, if IQVIA deals with any personal data under this Agreement in the manner of a data controller, IQVIA shall be the data controller of such personal data to the extent Zadavatel bude p\u016fsobit jako spr\u00e1vce \u00fadaj\u016f ve vztahu k takov\u00fdmto osobn\u00edm \u00fadaj\u016fm, av\u0161ak s v\u00fdjimkou p\u0159\u00edpadu, kdy IQVIA nakl\u00e1d\u00e1 s jak\u00fdmikoli osobn\u00edmi \u00fadaji na z\u00e1klad\u011b t\u00e9to Smlouvy jako\u017eto spr\u00e1vce dat, v takov\u00e9m p\u0159\u00edpad\u011b bude IQVIA spr\u00e1vcem of such dealings. takov\u00fdch osobn\u00edch \u00fadaj\u016f v rozsahu, v jak\u00e9m s nimi nakl\u00e1d\u00e1. IQVIA may process \u201cpersonal data\u201d, as defined in the applicable data protection legislation enacted under the same or equivalent/similar national legislation (collectively \u201cData Protection Legislation\u201d), of the Investigator and Study Staff for study-related purposes and all such processing will be carried out in accordance with the Data Protection Legislation. \u2587\u2587\u2587\u2587\u2587 je opr\u00e1vn\u011bn zpracov\u00e1vat \u201eosobn\u00ed \u00fadaje\u201c, jak jsou tyto definov\u00e1ny p\u0159\u00edslu\u0161n\u00fdmi pr\u00e1vn\u00edmi p\u0159edpisy na \u00faseku ochrany osobn\u00edch \u00fadaj\u016f, je\u017e byly vyd\u00e1ny na z\u00e1klad\u011b shodn\u00e9 \u010di ekvivalentn\u00ed/obdobn\u00e9 n\u00e1rodn\u00ed legislativy (spole\u010dn\u011b d\u00e1le jen \u201ePr\u00e1vn\u00ed p\u0159edpisy na ochranu osobn\u00edch \u00fadaj\u016f\u201c), Zkou\u0161ej\u00edc\u00edho a \u010dlen\u016f Studijn\u00edho person\u00e1lu pro \u00fa\u010dely souvisej\u00edc\u00ed se Studi\u00ed, p\u0159i\u010dem\u017e ve\u0161ker\u00e1 takov\u00e1 zpracov\u00e1n\u00ed budou prov\u00e1d\u011bna v souladu s Pr\u00e1vn\u00edmi p\u0159edpisy na ochranu osobn\u00edch \u00fadaj\u016f.", "samples": [{"hash": "e0Dq9Cs9tki", "uri": "/contracts/e0Dq9Cs9tki#data-controller", "label": "Clinical Trial Agreement", "score": 30.7951488495, "published": true}], "hash": "baceaa2407e5cde931620764c07a78d8", "id": 7}, {"size": 13, "snippet_links": [{"key": "the-sponsor", "type": "clause", "offset": [0, 11]}, {"key": "the-data-controller", "type": "definition", "offset": [21, 40]}, {"key": "personal-data", "type": "clause", "offset": [50, 63]}, {"key": "manner-of", "type": "clause", "offset": [139, 148]}, {"key": "to-the-extent", "type": "clause", "offset": [223, 236]}, {"key": "in-such-cases", "type": "clause", "offset": [255, 268]}, {"key": "institution-shall", "type": "clause", "offset": [270, 287]}, {"key": "study-personnel", "type": "clause", "offset": [296, 311]}, {"key": "information-required", "type": "clause", "offset": [321, 341]}, {"key": "by-cro", "type": "clause", "offset": [359, 365]}, {"key": "information-requirements", "type": "definition", "offset": [396, 420]}, {"key": "applicable-to", "type": "definition", "offset": [448, 461]}], "snippet": "The Sponsor shall be the data controller for such Personal Data except that, if CRO deals with any Personal Data under Section\n11.1 in the manner of a data controller, CRO shall be the data controller of such Personal Data to the extent of such dealings. In such cases, Institution shall provide Study Personnel with the information required about processing by CRO so that CRO complies with its information requirements under data protection laws applicable to CRO towards Investigator and Study Personnel.", "samples": [{"hash": "aihdMdHGqmT", "uri": "/contracts/aihdMdHGqmT#data-controller", "label": "Clinical Trial Agreement", "score": 29.5268993378, "published": true}, {"hash": "kBkpn9iPynw", "uri": "/contracts/kBkpn9iPynw#data-controller", "label": "Clinical Trial Agreement", "score": 27.6418685913, "published": true}, {"hash": "e9XjE4nYHAG", "uri": "/contracts/e9XjE4nYHAG#data-controller", "label": "Clinical Trial Agreement", "score": 27.3872947693, "published": true}], "hash": "52744b8735e30bdfdbc63a4f3f9d1667", "id": 2}, {"size": 9, "snippet_links": [{"key": "in-accordance-with", "type": "clause", "offset": [0, 18]}, {"key": "applicable-data-protection-laws", "type": "clause", "offset": [23, 54]}, {"key": "customer-shall", "type": "clause", "offset": [56, 70]}, {"key": "the-data-controller", "type": "definition", "offset": [74, 93]}], "snippet": "In accordance with all applicable data protection laws, Customer shall be the data controller.", "samples": [{"hash": "exDA8Za6DDe", "uri": "/contracts/exDA8Za6DDe#data-controller", "label": "Data Processing Agreement", "score": 34.0380821228, "published": true}, {"hash": "ddsH2aNBUJ0", "uri": "/contracts/ddsH2aNBUJ0#data-controller", "label": "Data Processing Agreement", "score": 33.3138923645, "published": true}, {"hash": "4JhaBbCcdHh", "uri": "/contracts/4JhaBbCcdHh#data-controller", "label": "Data Processing Agreement", "score": 33.1621246338, "published": true}], "hash": "a6619e30d9221348a390bf52c11b24fb", "id": 4}, {"size": 5, "snippet_links": [{"key": "the-term", "type": "definition", "offset": [0, 8]}, {"key": "legal-person", "type": "clause", "offset": [48, 60]}, {"key": "public-authority", "type": "clause", "offset": [62, 78]}, {"key": "processing-of-personal-data", "type": "clause", "offset": [175, 202]}, {"key": "for-purposes-of-this", "type": "clause", "offset": [204, 224]}, {"key": "where-applicable", "type": "clause", "offset": [263, 279]}, {"key": "by-customer", "type": "clause", "offset": [313, 324]}, {"key": "to-submit", "type": "definition", "offset": [325, 334]}, {"key": "the-subscription-service", "type": "clause", "offset": [352, 376]}], "snippet": "The term \u201cData Controller\u201d means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of Processing of Personal Data. For purposes of this DPA, Data Controller is Customer and, where applicable, its Affiliates either permitted by Customer to submit Personal Data to the Subscription Service or whose Personal Data is Processed in the Subscription Service.", "samples": [{"hash": "2qUyLRfdVJ4", "uri": "/contracts/2qUyLRfdVJ4#data-controller", "label": "Data Processing Agreement", "score": 26.6605072021, "published": true}, {"hash": "1PIBNl7poRt", "uri": "/contracts/1PIBNl7poRt#data-controller", "label": "Data Processing Addendum", "score": 26.2224502563, "published": true}], "hash": "d3f2e826a47a81cd3ef6d92d5582147c", "id": 10}, {"size": 6, "snippet_links": [{"key": "spr\u00e1vce-\u00fadaj\u016f", "type": "clause", "offset": [4, 17]}, {"key": "the-sponsor", "type": "clause", "offset": [18, 29]}, {"key": "the-data-controller", "type": "definition", "offset": [39, 58]}, {"key": "personal-data", "type": "clause", "offset": [68, 81]}, {"key": "this-agreement", "type": "clause", "offset": [143, 157]}, {"key": "manner-of", "type": "clause", "offset": [165, 174]}, {"key": "to-the-extent", "type": "clause", "offset": [255, 268]}, {"key": "applicable-data-protection-legislation", "type": "definition", "offset": [646, 684]}, {"key": "or-equivalent", "type": "definition", "offset": [708, 721]}, {"key": "national-legislation", "type": "clause", "offset": [730, 750]}, {"key": "the-investigator", "type": "clause", "offset": [800, 816]}, {"key": "study-staff", "type": "definition", "offset": [821, 832]}, {"key": "in-accordance-with", "type": "clause", "offset": [905, 923]}, {"key": "the-data-protection-legislation", "type": "definition", "offset": [924, 955]}, {"key": "osobn\u00ed-\u00fadaje", "type": "clause", "offset": [992, 1004]}], "snippet": "6.3 Spr\u00e1vce \u00fadaj\u016f The Sponsor shall be the data controller for such personal data except that, if Quintiles deals with any personal data under this Agreement in the manner of a data controller, Quintiles shall be the data controller of such personal data to the extent of such dealings. Zadavatel bude p\u016fsobit jako spr\u00e1vce \u00fadaj\u016f ve vztahu k takov\u00fdmto osobn\u00edm \u00fadaj\u016fm, av\u0161ak s v\u00fdjimkou p\u0159\u00edpadu, kdy Quintiles nakl\u00e1d\u00e1 s jak\u00fdmikoli osobn\u00edmi \u00fadaji na z\u00e1klad\u011b t\u00e9to Smlouvy jako\u017eto spr\u00e1vce dat, v takov\u00e9m p\u0159\u00edpad\u011b bude Quintiles spr\u00e1vcem takov\u00fdch osobn\u00edch \u00fadaj\u016f v rozsahu, v jak\u00e9m s nimi nakl\u00e1d\u00e1. Quintiles may process \"personal data\", as defined in the applicable data protection legislation enacted under the same or equivalent/similar national legislation (collectively \"Data Protection Legislation\"), of the Investigator and Study Staff for study- related purposes and all such processing will be carried out in accordance with the Data Protection Legislation. Quintiles je opr\u00e1vn\u011bn zpracov\u00e1vat \"osobn\u00ed \u00fadaje\", jak jsou tyto definov\u00e1ny p\u0159\u00edslu\u0161n\u00fdmi pr\u00e1vn\u00edmi p\u0159edpisy na \u00faseku ochrany osobn\u00edch \u00fadaj\u016f, je\u017e byly vyd\u00e1ny na z\u00e1klad\u011b shodn\u00e9 \u010di ekvivalentn\u00ed/obdobn\u00e9 n\u00e1rodn\u00ed legislativy (spole\u010dn\u011b d\u00e1le jen \"Pr\u00e1vn\u00ed p\u0159edpisy na ochranu osobn\u00edch \u00fadaj\u016f\"), Zkou\u0161ej\u00edc\u00edho a \u010dlen\u016f Studijn\u00edho person\u00e1lu pro \u00fa\u010dely souvisej\u00edc\u00ed se Studi\u00ed, p\u0159i\u010dem\u017e ve\u0161ker\u00e1 takov\u00e1 zpracov\u00e1n\u00ed budou prov\u00e1d\u011bna v souladu s Pr\u00e1vn\u00edmi p\u0159edpisy na ochranu osobn\u00edch \u00fadaj\u016f.", "samples": [{"hash": "9hkm2NkZNd9", "uri": "/contracts/9hkm2NkZNd9#data-controller", "label": "Clinical Trial Agreement", "score": 28.1327190399, "published": true}, {"hash": "7tsOaGNr1Ja", "uri": "/contracts/7tsOaGNr1Ja#data-controller", "label": "Clinical Trial Agreement", "score": 27.3744678497, "published": true}], "hash": "68b0e1b0e93fa40d5c7ca0ae9250a9db", "id": 5}, {"size": 11, "snippet_links": [{"key": "the-services", "type": "definition", "offset": [43, 55]}, {"key": "data-processing-schedule", "type": "definition", "offset": [99, 123]}, {"key": "applicable-data-protection-law", "type": "definition", "offset": [177, 207]}, {"key": "your-customer-data", "type": "clause", "offset": [252, 270]}, {"key": "responsible-for", "type": "clause", "offset": [290, 305]}, {"key": "the-content", "type": "clause", "offset": [306, 317]}, {"key": "legal-sufficiency", "type": "clause", "offset": [322, 339]}, {"key": "no-claim", "type": "definition", "offset": [371, 379]}, {"key": "to-customer", "type": "clause", "offset": [393, 404]}], "snippet": "You may provide Customer Data for use with the Services. Notwithstanding Our obligations under the Data Processing Schedule, You are the only Data Controller (as defined in the applicable data protection law, including the Regulation (EU) 2016/679) of your Customer Data and You are solely responsible for the content and legal sufficiency of your Customer Data. We make no claim of ownership to Customer Data.", "samples": [{"hash": "jfEsmiBddfP", "uri": "/contracts/jfEsmiBddfP#data-controller", "label": "Genesys Cloud Service Agreement", "score": 31.136472702, "published": true}, {"hash": "8J663wBta0K", "uri": "/contracts/8J663wBta0K#data-controller", "label": "Genesys Cloud Service Agreement", "score": 31.0598258972, "published": true}, {"hash": "bvIHFY1krXQ", "uri": "/contracts/bvIHFY1krXQ#data-controller", "label": "Purecloud Service Agreement", "score": 30.7231292725, "published": true}], "hash": "589595549fcde331a8694623bc9905d4", "id": 3}, {"size": 6, "snippet_links": [{"key": "the-sponsor", "type": "clause", "offset": [0, 11]}, {"key": "the-data-controller", "type": "definition", "offset": [21, 40]}, {"key": "personal-data", "type": "clause", "offset": [55, 68]}, {"key": "this-agreement", "type": "clause", "offset": [126, 140]}, {"key": "manner-of", "type": "clause", "offset": [148, 157]}, {"key": "to-the-extent", "type": "clause", "offset": [234, 247]}, {"key": "in-such-cases", "type": "clause", "offset": [266, 279]}, {"key": "institution-shall", "type": "clause", "offset": [281, 298]}, {"key": "information-required", "type": "clause", "offset": [326, 346]}, {"key": "information-requirements", "type": "definition", "offset": [405, 429]}, {"key": "applicable-to", "type": "definition", "offset": [457, 470]}], "snippet": "The Sponsor shall be the data controller for Personnel personal data except that, if IQVIA deals with any personal data under this Agreement in the manner of a data controller, IQVIA shall be the data controller of such personal data to the extent of such dealings. In such cases, Institution shall provide Personnel with the information required about processing by IQVIA so that IQVIA complies with its information requirements under data protection laws applicable to IQVIA towards Personnel.", "samples": [{"hash": "kh3vhuvTTYN", "uri": "/contracts/kh3vhuvTTYN#data-controller", "label": "Clinical Trial Agreement", "score": 30.8298873901, "published": true}], "hash": "2152aaa3ff2296ce670a0aaa3be06ca8", "id": 6}, {"size": 5, "snippet_links": [{"key": "for-the-purpose-of-article", "type": "clause", "offset": [0, 26]}, {"key": "the-data-controller", "type": "definition", "offset": [33, 52]}, {"key": "director-of", "type": "clause", "offset": [60, 71]}, {"key": "permanent-secretariat", "type": "definition", "offset": [72, 93]}], "snippet": "For the purpose of Article II.9, the data controller is the Director of Permanent Secretariat of the Transport Community.", "samples": [{"hash": "aNedmwtsSE9", "uri": "/contracts/aNedmwtsSE9#data-controller", "label": "Framework Contract for Design Services", "score": 30.2207984924, "published": true}, {"hash": "5f1C8PoxvRW", "uri": "/contracts/5f1C8PoxvRW#data-controller", "label": "Framework Contract for Design Services", "score": 30.1722126007, "published": true}, {"hash": "8BqDkzrlxuy", "uri": "/contracts/8BqDkzrlxuy#data-controller", "label": "Framework Contract for Consultancy Services", "score": 29.8875274658, "published": true}], "hash": "2d67a8052ec61f501a425140a74e664b", "id": 8}, {"size": 5, "snippet_links": [{"key": "the-entity", "type": "clause", "offset": [0, 10]}, {"key": "the-data-controller", "type": "definition", "offset": [72, 91]}, {"key": "head-of-unit", "type": "definition", "offset": [96, 108]}, {"key": "european-commission", "type": "definition", "offset": [216, 235]}, {"key": "for-grant-agreements", "type": "clause", "offset": [277, 297]}, {"key": "personal-data-processed", "type": "clause", "offset": [367, 390]}, {"key": "the-beneficiaries", "type": "clause", "offset": [413, 430]}, {"key": "the-provisions", "type": "clause", "offset": [449, 463]}], "snippet": "The entity acting as a data controller as provided for in Article II.7, the data controller is: Head of Unit B4 Directorate B \u2013 Youth, Education & Erasmus+ Directorate-General for Education, Youth, Sport and Culture European Commission B-1049 Brussels Belgium [Only applicable for grant agreements with non-EU/EEA beneficiaries: The localisation of and access to the personal data processed outside EU and EEA by the beneficiaries shall comply with the provisions laid down in Regulation 2018/1725].", "samples": [{"hash": "3wrx8riZa2E", "uri": "/contracts/3wrx8riZa2E#data-controller", "label": "Standard Grant Agreement", "score": 31.7588710785, "published": true}, {"hash": "kS0o7jxXmuh", "uri": "/contracts/kS0o7jxXmuh#data-controller", "label": "Standard Grant Agreement", "score": 31.7205467224, "published": true}, {"hash": "SCMy8XHpE6", "uri": "/contracts/SCMy8XHpE6#data-controller", "label": "Standard Grant Agreement", "score": 25.6639289856, "published": true}], "hash": "95c22fb54e4c9a2ec0cb0518e84684b9", "id": 9}], "next_curs": "ClgSUmoVc35sYXdpbnNpZGVyY29udHJhY3RzcjQLEhZDbGF1c2VTbmlwcGV0R3JvdXBfdjU2IhhkYXRhLWNvbnRyb2xsZXIjMDAwMDAwMGEMogECZW4YACAA", "clause": {"size": 281, "title": "Data Controller", "children": [["communication", "COMMUNICATION"], ["compliance", "COMPLIANCE"], ["customers-affiliates", "CUSTOMER\u2019S AFFILIATES"], ["security-risk-assessment", "SECURITY RISK ASSESSMENT"], ["claims", "CLAIMS"]], "parents": [["personal-data-6", "Personal Data 6"], ["general-provisions", "General Provisions"], ["definitions", "Definitions"], ["personal-data", "Personal Data"], ["data-protection-privacy", "Data Protection Privacy"]], "id": "data-controller", "related": [["controller", "Controller", "Controller"], ["other-controller-audit", "Other Controller Audit", "Other Controller Audit"], ["compliance-control-services", "Compliance Control Services", "Compliance Control Services"], ["custody-and-accounting-services", "Custody and Accounting Services", "Custody and Accounting Services"], ["legal-and-accounting-services", "Legal and Accounting Services", "Legal and Accounting Services"]], "related_snippets": [], "updated": "2026-04-18T06:00:06+00:00", "also_ask": ["What are the minimum obligations a Data Controller must have to ensure compliance with applicable data protection laws?", "How can the definition of 'Data Controller' be strategically narrowed or expanded to allocate liability?", "What are the most common drafting pitfalls that could undermine enforceability of Data Controller clauses?", "How do Data Controller responsibilities differ under GDPR versus other major data privacy regimes?", "What evidence is most persuasive in court to establish or dispute Data Controller status?"], "drafting_tip": "Define the term 'Data Controller' precisely to avoid ambiguity; specify responsibilities to ensure compliance with data protection laws; clarify decision-making authority to prevent disputes.", "explanation": "The Data Controller clause defines which party in an agreement is responsible for determining the purposes and means of processing personal data. In practice, this clause identifies the entity that makes key decisions about how and why personal information is collected, used, and managed, often in compliance with data protection laws such as the GDPR. By clearly assigning this role, the clause ensures accountability for data handling and helps prevent disputes or confusion regarding data privacy obligations."}, "json": true, "cursor": ""}}