Obligations of Skeepers as a Processor. Skeepers undertakes to: − comply, before and throughout the processing operations, with the Data Protection Regulations in force and, in particular, the GDPR; − inform Data Subjects about the processing operations covered by these T&C in the Skeepers Privacy Policy and, if necessary, in its specific Policies; − only grant access to the Client’s Personal Data to staff members who need to process it; − protect the confidentiality of the Personal Data processed under this Data Processing Agreement and during the performance of the T&C, in particular by ensuring that the persons authorised to process the Personal Data, under this Agreement: o have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality, o receive the necessary training in Personal Data protection; − process the data solely for the one or more purposes subcontracted to the Processor; − process the data in accordance with the Client’s documented instructions set out in this Data Processing Agreement, unless otherwise required by Skeepers under the Union or Member State law to which it is subject. In such a case, Skeepers shall inform the Client of that legal requirement before processing, unless the law prohibits such information on important grounds of public interest. Skeepers shall immediately inform the Client if, in its opinion, an instruction breaches the Data Protection Regulations in force or any other Union or Member State data protection provisions. In such a case, it reserves the right, without any right for the Client to hold it liable or sanction it in any manner whatsoever, not to follow the instruction given, while continuing to perform the T&C and this Data Processing Agreement. The Client and Skeepers undertake to meet to settle the problem with the suspended instruction and negotiate an agreement on any sticking points; − take into account, with regard to its tools, products, applications or services, the principles of privacy by design and privacy by default; − keep a template record of Personal Data processing operations, which may be provided at any time at the request of the Client, in accordance with the Data Protection Regulations in force. It will be the responsibility of the Client to customise and update it, where applicable; − collaborate with the Client in the event of an inspection by a court of law, administrative authority or a data protection authority or future changes to the Data Protection Regulations in forc...
