Terms of Processing Clause Samples
The "Terms of Processing" clause defines the rules and conditions under which personal data or other information is handled, stored, and processed by the parties involved in an agreement. It typically outlines the types of data covered, the purposes for which data may be processed, and the responsibilities of each party regarding data protection and compliance with relevant laws, such as GDPR. By clearly specifying these terms, the clause ensures that both parties understand their obligations and helps prevent misuse or unauthorized access to sensitive information, thereby promoting data security and legal compliance.
Terms of Processing. You agree that your processing of Twitter Data shall be governed by this Purchase Order with Twitter, and you represent and warrant that you shall:
a. process Twitter Data only on the documented instructions of Twitter, including with regard to transfers of personal data to a third country or an international organization, unless required to do so by applicable law to which you are subject. You shall immediately inform Twitter if, in your opinion, an instruction from Twitter infringes Applicable Data Protection Law or other European Union or Member State data protection provisions. If you are required to so transfer personal data to a third country or an international organization, you shall inform Twitter of that legal requirement before processing or so transferring the applicable Twitter Data, unless that law prohibits such information on important grounds of public interest;
b. provide the data processing activities for the Twitter Data as set out in this Purchase Order, the Order or as mutually agreed upon by the parties;
c. act solely as a service provider with respect to your processing of Twitter Data and you shall not
(i) sell Twitter Data, or (ii) retain, use or disclose Twitter Data (a) for any purpose other than the specific purpose of providing the Deliverables, or (b) outside of the direct business relationship between you and Twitter;
d. ensure that persons (including your employees, agents, or other authorized personnel) authorized to process Twitter Data are aware of the terms of this Purchase Order, and are under a duty of confidentiality with respect to Twitter Data no less restrictive than the duties set forth herein;
e. take all measures required pursuant to Article 32 (“Security of Processing”) of the GDPR and equivalent provisions of other Applicable Data Protection Law, including the measures incorporated into this Purchase Order, the applicable Order, or as mutually agreed upon by the parties;
f. comply with Section 4 of this DPA;
g. assist Twitter in the fulfilment of Twitter’s obligation to respond to requests for exercising a given individual’s rights under Applicable Data Protection Law;
h. assist Twitter in ensuring compliance with the obligations imposed by Articles 32 (“Security of Processing”), 33 (“Notification of a personal data breach to the supervisory authority”), 34 (“Communication of a personal data breach to the data subject”), 35 (“Data protection impact assessment”), and 36 (“Prior consultation”) of the GDPR or eq...
Terms of Processing. 2.1 PHL will act only on the written instructions of the Controller in processing any data supplied (“the Data”), personal or otherwise, unless required by law to act without such instruction. Agreement to trade with PHL under written Sales Agreements, or by written acceptance of provided quotation for services, is taken to constitute consent to process the Data solely for the purposes necessary to perform the contracted services.
2.2 PHL will ensure that any people processing or accessing the Data are subject to a duty of confidence. All staff of PHL are bound by the terms of PHL’s Staff Data Policy regarding correct and lawful processing.
2.3 PHL will take appropriate measures to ensure the security of processing the Data, such that are outlined in PHL’s Data Policy as published on Whistl UK’s website.
2.4 By submitting the Data for delivery by a chosen courier or postal provider through Parcelhub, such shipment being governed by prior written Sales Agreement, or by written acceptance of provided quotation for services, the Controller agrees to PHL passing any of the Data necessary to that courier or postal provider for processing for their contracted purpose of conducting that delivery. PHL may also use other companies within the Whistl Group to assist with courier management services and Customer Service provision, in which event restricted staff thereof will access related data to the query. On occasion Customer Service support may be provided using external companies processing outside the UK/EEA – Controllers can choose not to allow such support by request. Address and company lines, but not name or contact details, within the Data may be verified using external services including on occasion processing outside the UK/EEA. Otherwise PHL will only engage sub-processors of the Data with the prior consent of the Controller and written agreement.
2.5 PHL will assist the Controller in meeting any stated obligations regarding the provision of subject access to their personal data and any other rights under GDPR. Should PHL receive such a request directly, it will in the first instance refer the request to the Controller, inform the data subject that it has done so, and subsequently act according to the reasonable instruction of the Controller in providing further information or access.
2.6 PHL will assist the Controller in meeting any stated obligations regarding security of processing of the Data. The Controller is advised to incorporate the Details of P...