Common use of Processing of Customer Data Clause in Contracts

Processing of Customer Data. With respect to personal data within Customer Data under this DPA, the parties agree that Customer is the controller and Coupa is a processor. Customer will comply with its obligations as a controller and Coupa will comply with its obligations as a processor under the Agreement and this DPA. Coupa will only process Customer Data in fulfilling its obligations under the Agreement, such as, without limitation, providing and supporting Customer’s usage of the subscription service, detecting, and addressing security and technical issues, and responding to support requests. The processing of Customer Data only takes place within the framework of the Agreement and according to the instructions of Customer. In particular, the collected, processed or used data may only be corrected, deleted, or blocked on instructions of Customer. Backup copies are created, if they are necessary to ensure proper data processing, or reproduction processes that are necessary in order to ensure compliance with regulatory retention requirements. All instructions must be issued in writing. Coupa shall immediately inform the Customer if, in its opinion, an instruction violates the GDPR or other applicable data protection regulations.

Processing of Customer Data. With respect to personal data within Customer Data under this DPA, the parties agree that Customer is the controller and Coupa is a processor. Customer will comply with its obligations as a controller and Coupa will comply with its obligations as a processor under the Agreement and this DPA. Coupa will only process Customer Data in fulfilling its obligations under the Agreement, such as, without limitation, providing and supporting Customer’s usage of the subscription service, detecting, detecting and addressing security and technical issues, and responding to support requests. The processing of Customer Data only takes place within the framework of the Agreement and according to the instructions of Customer. In particular, the collected, processed or used data may only be corrected, deleted, deleted or blocked on instructions of Customer. Backup copies are created, if they are necessary to ensure proper data processing, or reproduction processes that are necessary in order to ensure compliance with regulatory retention requirements. All instructions must be issued in writing. Coupa shall immediately inform the Customer if, in its opinion, an instruction violates the GDPR or other applicable data protection regulations.