Data Protection; Data Security; Data Portability Sample Clauses
Data Protection; Data Security; Data Portability.
i. implement and maintain at all times all appropriate security measures in relation to the processing of personal data;
ii. maintain a record of all processing activities carried out under this PayPal Plus Agreement; and
iii. not knowingly do anything or permit anything to be done which might lead to a breach by the other party of the applicable data protection laws. With respect to your data transfers to PayPal of your customers located in the European Union, Switzerland, the Europeans Economic Area, and/or their member states and the United Kingdom, we each agree that (i) your signing of the Agreement will be deemed to be signature and acceptance of Module 1 (Controller-to-Controller) provisions of the standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 approved by European Commission Decision 2021/914 of 4 June 2021 (“C2C Transfer Clauses”) by Merchant, as the data exporter and (ii) PayPal’s signature of this Agreement will be deemed to be signature and acceptance of the C2C Transfer Clauses by PayPal, as the data importer. In the event the European Commission revises and thereafter publishes new C2C Transfer Clauses (or as otherwise required or implemented by the European Commission) or the UK Secretary of State (or other applicable UK authorized body) approves and issues UK standard contractual clauses or other similar contractual mechanism (“UK Clauses”) to be used instead of C2C Transfer Clauses to legitimize personal data transfer outside the United Kingdom, the parties agree that, respectively, such new C2C Transfer Clauses or UK Clauses will supersede the present C2C Transfer Clauses or UK Clauses, as applicable, and that they will take all such actions required to effect the execution of the new C2C Transfer Clauses or UK Clauses, as applicable. The C2C Transfer Clauses (Module 1) will be incorporated into the Agreement by reference and will be considered duly executed between the parties upon entering into force of this Agreement subject to the following details:
1. in case of any transfers of personal data from Switzerland, subject exclusively to the Swiss Federal Act on Data Protection and other data protection laws of Switzerland (“Swiss Data Protection Laws”); or the United Kingdom, general and specific references in the C2C Transfer Clauses to: (a) Regulation (EU) 2016/679 or EU or Member State Law, shall have the same meaning as the equivalent reference in, respectively...