Data protection. 1.1 Both parties will comply with all applicable requirements of the Data Protection and Domestic Legislation. This Appendix is in addition to, and does not relieve, remove or replace, a party 's obligations or rights under the Data Protection Legislation. 1.2 The parties acknowledge that for the purposes of the Data Protection Legislation, the roles of Controller, Processor and/or Sub - Processor may be dependent on the services actually being provi ded by the Parties under the Agreement and/or the source of the personal data, amongst other factors, and, as such, these roles shall be assigned on a case by case basis as reflected in the Annex[es] to this Appendix. The provisions below shall apply to each Party as appropriate and in accordance with those Annexes. 1.3 Where both Parties are acting as independent Controllers, each Party agrees to comply with the requirements of the Data Protection Laws applicable to Controllers in respect of the Personal Data transferred pursuant to this Agreement. 1.4 The Controller will en sure that it has all necessary appropriate consents and notices in place to enable lawful transfer of the Personal Data to the Processor and/or lawful collection of the Personal Data by the Processor on behalf of the Controller for the duration and purpose s of this Agreement. 1.5 The Processor shall, in relation to any Personal Data processed in connection with the performance by the Processor of its obligations under this agreement: a) process that Personal Data only on the documented written instructions of the Controller which are set out in the Agreement unless the Processor is required by Applicable Law to otherwise process that Personal Data. Where the Processor is relying on Applicable Law as the basis for processing Personal Data, the Processor shall prompt ly notify the Controller of this before performing the processing required by the Applicable Law unless such Applicable Law prohibits the Processor from so notifying the Controller; b) ensure that it has in place appropriate technical and organisational measures, reviewed by the Controller, to protect against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage DEFINIZIONI 1. Titolare, Responsabile del trattamento, Interessato, Dati Personali, Violazione dei Dati Personali, trattamento e misure tecniche e organizzative adeguate: come da definizione nella Normativa applicabile sulla Protezione dei Dati. 2. Normativa sulla Protezione dei Dati: il Regolamento Generale per la Protezione dei Dati Personali ((UE) 2016/679) (il “GDPR”); la Legge sulla Protezione dei Dati Personali 2018; la Direttiva sulla Privacy e sulle Comunicazioni elettroniche 2002/58/CE (aggi ornata dalla Direttiva 2009/136/CE) e i Regolamenti sulla Privacy e le Comunicazioni Elettroniche 2003 (SI 2003/2426), come modificati, e qualsiasi altra normativa dell’Unione Europea relativa ai dati personali e tutte le altre normative e i requisiti rego latori di volta in volta in vigore che si applicano a una parte in relazione all'uso dei dati personali (comprese senza limitazioni la privacy di comunicazioni elettroniche); e le linee guida e i codici di condotta emessi dalla rispettiva autorità di prote zione dei dati o di controllo e applicabili a una parte. 3. Regolamentazione interna: s’intendono tutte le leggi e regolamentazioni applicabili relative alla prestazione di servizi, incluse ma non a esse limitate, leggi e regolamentazioni applicabili o discip linanti il trattamento di dati personali e pagamenti elettronici, leggi di diritto penale, ad es. riciclaggio di denaro, leggi fiscali e altre leggi e regolamentazioni imperative concernenti l’adempimento di obblighi ai sensi del presente Accordo.
Appears in 2 contracts
Sources: Merchant Contract, Merchant Contract
Data protection. 1.1 Both parties will comply with all applicable requirements of the Data Protection and Domestic Legislation. This Appendix is in addition to, and does not relieve, remove or replace, a party 's obligations or rights under the Data Protection Legislation. 1.2 The parties acknowledge that for the purposes of the Data Protection Legislation, the roles of Controller, Processor and/or Sub - Processor may be dependent on the services actually being provi ded by the Parties under the Agreement and/or the source of the personal data, amongst other factors, and, as such, these roles shall be assigned on a case by case basis as reflected in the Annex[es] to this Appendix. The provisions below shall apply to each Party as appropriate and in accordance with those Annexes. 1.3 Where both Parties are acting as independent Controllers, each Party agrees to comply with the requirements of the Data Protection Laws applicable to Controllers in respect of the Personal Data transferred pursuant to this Agreement. 1.4 The Controller will en sure that it has all necessary appropriate consents and notices in place to enable lawful transfer of the Personal Data to the Processor and/or lawful collection of the Personal Data by the Processor on behalf of the Controller for the duration and purpose s of this Agreement. 1.5 The Processor shall, in relation to any Personal Data processed in connection with the performance by the Processor of its obligations under this agreement: a) process that Personal Data only on the documented written instructions of the Controller which are set out in the Agreement unless the Processor is required by Applicable Law to otherwise process that Personal Data. Where the Processor is relying on Applicable Law as the basis for processing Personal Data, the Processor shall prompt ly notify the Controller of this before performing the processing required by the Applicable Law unless such Applicable Law prohibits the Processor from so notifying the Controller; b) ensure that it has in place appropriate technical and organisational measures, reviewed by the Controller, to protect against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage DEFINIZIONI
1. Titolare, Responsabile del trattamento, Interessato, Dati Personali, Violazione dei Dati Personali, trattamento e misure tecniche e organizzative adeguate: come da definizione nella Normativa applicabile sulla Protezione dei Dati. 2. Normativa sulla Protezione dei Dati: il Regolamento Generale per la Protezione dei Dati Personali ((UE) 2016/679) (il “GDPR”); la Legge sulla Protezione dei Dati Personali 2018; la Direttiva sulla Privacy e sulle Comunicazioni elettroniche 2002/58/CE (aggi ornata dalla Direttiva 2009/136/CE) e i Regolamenti sulla Privacy e le Comunicazioni Elettroniche 2003 (SI 2003/2426), come modificati, e qualsiasi altra normativa dell’Unione Europea relativa ai dati personali e tutte le altre normative e i requisiti rego latori di volta in volta in vigore che si applicano a una parte in relazione all'uso dei dati personali (comprese senza limitazioni la privacy di comunicazioni elettroniche); e le linee guida e i codici di condotta emessi dalla rispettiva autorità di prote zione dei dati o di controllo e applicabili a una parte. 3. Regolamentazione interna: s’intendono tutte le leggi e regolamentazioni applicabili relative alla prestazione di servizi, incluse ma non a esse limitate, leggi e regolamentazioni applicabili o discip linanti il trattamento di dati personali e pagamenti elettronici, leggi di diritto penale, ad es. riciclaggio di denaro, leggi fiscali e altre leggi e regolamentazioni imperative concernenti l’adempimento di obblighi ai sensi del presente Accordo.
Appears in 1 contract
Sources: Merchant Contract