ROLES & PROCESSING Sample Clauses

ROLES & PROCESSING. 2.1. This appendix sets forth the rights and obligations of the Parties with respect to the processing of personal data under the GDPR. 2.2. The Parties agree that during the Term of this Agreement, ClearContract shall act as the data processor and the Customer shall act as the data controller. 2.3. During the Term of this Agreement, ClearContract will process personal data on behalf of the Customer in accordance with this appendix. 2.4. The Data Processor shall process personal data only on documented instructions from the data controller, unless required to do so by EU or Member State law. The Data Processor shall immediately inform the Data Controller if the instruction, in the opinion of the Data Processor, contravene the GDPR or applicable EU or Member State data protection provisions. 2.5. The Data Processor shall only grant access to the personal data being processed on behalf of the Data Controller to persons under the Data Processor’s authority who have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality and only on a need-to- know basis.