Common use of Data Protection Clause in Contracts

Data Protection. The provision of Merchant Services (a) You shall, in relation to the provision of Merchant Services, comply with all applicable Data Protection Rules as they apply to you in your role as data controller. The terms “processing”, “controller” and “processor” shall have the meaning ascribed to them by the Data Protection Rules. (b) You are the controller, and Elavon is the processor, in relation to processing of Transaction-related personal data in connection with the provision of Merchant Services. The data processing activities carried out by ▇▇▇▇▇▇ are as follows: Subject matter and duration of processing: Personal data is processed for the purpose of providing Merchant Services under this Agreement during the term of this Agreement. Nature and purpose of the processing: Obtaining, recording, storing and transmitting personal data for the purpose of enabling Transactions. Types of personal data: Cardholder data that is necessary to process transactions in the course of providing the Merchant Services. Categories of data subject: Customers who purchase goods or services. (c) When Elavon processes such personal data for any purpose other than in connection with the provision of Merchant Services (including, without limitation, carrying out fraud prevention checks, anti-money laundering checks and use of aggregated data for analysis purposes), Elavon shall be a controller in respect of such processing.