Segregation control. The Service Provider must process data collected for different purposes separately (i.e. measures to provide for separate processing (storage, amendment, deletion, transmission) of data for different purposes must be in place). In addition, the Service Provider and any of its subcontractors will not store, process or access any data received from the ESM outside of the euro area without the ESM’s prior written consent. If the Service Provider or any of its subcontractors want to store, process or access any personal data received from the ESM outside of the European Economic Area, in addition to receiving the ESM’s prior written consent, the Parties will agree on adequate contractual safeguards with respect to the protection of personal data outside of the European Economic Area. The Service Provider is responsible for ensuring that all of its Employees, subcontractors and any other persons acting on behalf of the Service Provider in the performance of the Services will comply with all aspects of and all obligations arising out of this § 12 and ▇▇▇▇▇ ▇▇ and III and will be liable for any breach by them of these obligations. Without prejudice to Clause 1.5 (Reporting) of ▇▇▇▇▇ ▇▇ hereto the Service Provider shall report to the ESM any actual or suspected breach of confidentiality, integrity and/or availability of ESM data, including personal data, held by or processed by the Service Provider. Such reports shall be issued within 24 hours upon identifying the breach and shall contain details on the actions undertaken to investigate and repair such breach.
Appears in 2 contracts
Sources: Framework Agreement, Framework Agreement