of GDPR Sample Clauses

of GDPR. 9.2 The Processor must at least once (1) per year review the security of the Processing through a self-monitoring in order to ensure that the Processing complies with the Agreement. The result of this self-monitoring shall be made available to the Controller upon request
Sample 1Sample 2Sample 3See All (7)
AutoNDA by SimpleDocs
of GDPR. 1.2 Each of the Supplier and Customer shall, at all times, comply with its obligations under all Data Protection Legislation and all applicable Supplier Policies in connection with this Agreement.
Sample 1Sample 2Sample 3
of GDPR. <Enter type, e.g. data concerning health, racial or ethnic origin, or trade union membership> ☐ Other information subject to a special need for protection: <Enter type, e.g. national identity number, financial details, performance assessments in employment relationships, etc.> ☒ Other personal data: Name, addresses (billing and shipping), company information (name and organisation number), phone number and email. Categories of data subjects The processing concerns the following categories of data subjects: Customers of Smartbells AS which are farmers located in Norway and in Sweden and StalkIT which are waste handling and industrial equipment companies located in countries from the European Union (Norway, Denmark, Sweden, Finland, the UK, Spain and Germany) Duration of processing Processing of personal data by the Data Processor under the Main Agreement may commence when the Data Processing Agreement has entered into force. The processing has the following duration (select one option): ☒ The processing is not limited in time and lasts until the expiry of the Main Agreement. ☐ The processing is limited in time and applies until <state date or criterion for termination, such as the conclusion of a project. Note that the processing may not normally be concluded before the Main Agreement expires >. On expiry (of the Main Agreement or the processing), personal data must be returned and erased in accordance with section 12 of the Data Processing Agreement and the instructions in Appendix C. APPENDIX B – Conditions for the Data Processor’s use of and changes in any Subprocessors The Data Controller’s approval of the use of Subprocessors When entering into the Data Processing Agreement, the Data Controller approves the use of the Subprocessors listed in section . Note that parent and sister companies and subsidiaries of the Data Processor are also considered to be Subprocessors if they contribute to the delivery of services and process personal data. The following is agreed concerning changes in the use of Subprocessors: ☒ The Data Processor may use a Subprocessor from the same Group (parent or sister company or subsidiary) that is established in a country within the EEA. The Data Processor must inform the Data Controller in advance of the use of any such Subprocessor. (This option can be combined with one of the other options.) ☐ The Data Processor may make changes to the use of Subprocessors provided that the Data Controller is notified and is given the opportun...
Sample 1Sample 2
of GDPR. 6.6 In the event the Customer objects to a new Sub-processor and such objection is not found unreasonable, XXXXxx.xxx will use reasonable efforts to ● make available to the Customer a change in the Offerings and/or the Services or ● recommend a commercially reasonable change to the Customer’s configuration or use of the Offerings and/or the Services to avoid Processing of Personal Data by the objected new Sub-processor without unreasonably burdening the Customer.
Sample 1Sample 2
of GDPR. 5. The parties agree that this Agreement constitute a different legal act referred to in article 28 section 3 of the GDPR and, together with the provisions of Synerise
Sample 1
of GDPR. ☒ Other information subject to a special need for protection: It may be necessary to process national identity number or financial details in certain cases. ☒ Other personal data: Name, vehicle registration number, photos showing time of toll booth passage, etc.
Sample 1
of GDPR. 11.1.4 Supplier is obligated to take appropriate technical and organisational measures necessary in order to protect the personal data processed in accordance with applicable data protection legislation and to inform STV about which technical and organisational measures that will be taken and any planned changes thereto.
Sample 1
AutoNDA by SimpleDocs
of GDPR. <Enter type, e.g. data concerning health, racial or ethnic origin, or trade union membership> ☐ Other information subject to a special need for protection: <Enter type, e.g. national identity number, financial details, performance assessments in employment relationships, etc.> ☐ Other personal data: <Enter type, e.g. name and contact details, education, communication preferences, etc.> Categories of data subjects The processing concerns the following categories of data subjects: <Describe who the processing of personal data concerns, for example: “Residents of Oslo Municipality”, “Users of the after-school scheme” or “Employees and consultants at DFØ”. If data concerning a particularly vulnerable or exposed group, such as children or disabled people, is processed, this should be stated separately.> Duration of processing Processing of personal data by the Data Processor under the Main Agreement may commence when the Data Processing Agreement has entered into force. The processing has the following duration (select one option): ☐ The processing is not limited in time and lasts until the expiry of the Main Agreement. ☐ The processing is limited in time and applies until <state date or criterion for termination, such as the conclusion of a project. Note that the processing may not normally be concluded before the Main Agreement expires >. On expiry (of the Main Agreement or the processing), personal data must be returned and erased in accordance with section 12 of the Data Processing Agreement and the instructions in Appendix C. Conditions for the Data Processor’s use of and changes in any Subprocessors The Data Controller’s approval of the use of Subprocessors When entering into the Data Processing Agreement, the Data Controller approves the use of the Subprocessors listed in section B.2. Note that parent and sister companies and subsidiaries of the Data Processor are also considered to be Subprocessors if they contribute to the delivery of services and process personal data. The following is agreed concerning changes in the use of Subprocessors: ☐ The Data Processor may use a Subprocessor from the same Group (parent or sister company or subsidiary) that is established in a country within the EEA. The Data Processor must inform the Data Controller in advance of the use of any such Subprocessor. (This option can be combined with one of the other options.) ☐ The Data Processor may make changes to the use of Subprocessors provided that the Data Controller is no...
Sample 1

Related to of GDPR

  • GDPR SAP and Customer agree that it is each party’s responsibility to review and adopt requirements imposed on Controllers and Processors by the General Data Protection Regulation 2016/679 (“GDPR”), in particular with regards to Articles 28 and 32 to 36 of the GDPR, if and to the extent applicable to Personal Data of Customer/Controllers that is processed under the DPA. For illustration purposes, Appendix 3 lists the relevant GDPR requirements and the corresponding sections in this DPA.

  • Procurement of Goods and Services (a) If the HSP is subject to the procurement provisions of the BPSAA, the HSP will abide by all directives and guidelines issued by the Management Board of Cabinet that are applicable to the HSP pursuant to the BPSAA.

  • Particular Methods of Procurement of Goods and Works International Competitive Bidding. Goods and works shall be procured under contracts awarded on the basis of International Competitive Bidding.

  • Notice to European Union Users Grief Is Life Transitioning L.L.C's operations are located primarily in the United States. If you provide information to us, the information will be transferred out of the European Union (EU) and sent to the United States. (The adequacy decision on the EU-US Privacy became operational on August 1, 2016. This framework protects the fundamental rights of anyone in the EU whose personal data is transferred to the United States for commercial purposes. It allows the free transfer of data to companies that are certified in the US under the Privacy Shield.) By providing personal information to us, you are consenting to its storage and use as described in this Policy. Your Rights as a Data Subject Under the regulations of the General Data Protection Regulation ("GDPR") of the EU you have certain rights as a Data Subject. These rights are as follows: · The right to be informed: this means we must inform you of how we intend to use your personal data and we do this through the terms of this Policy. · The right of access: this means you have the right to request access to the data we hold about you and we must respond to those requests within one month. You can do this by sending an email to XxxxxxxxxxxxxxXXXX.xxx. · The right to rectification: this means that if you believe some of the date, we hold is incorrect, you have the right to have it corrected. You can do this by logging into your account with us, or by sending us an email with your request. · The right to erasure: this means you can request that the information we hold be deleted, and we will comply unless we have a compelling reason not to, in which case you will be informed of same. You can do this by sending an email to XxxxxxxxxxxxxxXXXX.xxx. · The right to restrict processing: this means you can change your communication preferences or opt-out of certain communications. You can do this by sending an email to XxxxxxxxxxxxxxXXXX.xxx. · The right of data portability: this means you can obtain and use the data we hold for your own purposes without explanation. If you wish to request a copy of your information, contact us at XxxxxxxxxxxxxxXXXX.xxx. · The right to object: this means you can file a formal objection with us regarding our use of your information with regard to third parties, or its processing where our legal basis is our legitimate interest in it. To do this, please send an email to XxxxxxxxxxxxxxXXXX.xxx. In addition to the rights above, please rest assured that we will always aim to encrypt and anonymize your personal information whenever possible. We also have protocols in place in the unlikely event that we suffer a data breach and we will contact you if your personal information is ever at risk. For more details regarding our security protections see the section below or visit our website at XxxxxxxxxxxxxxXXXX.xxx.

Time is Money Join Law Insider Premium to draft better contracts faster.