Details of Processing 3.1. For details of how personal data is processed under this Agreement, please register to see our "GDPR Portal" at xxxxx://xxxxxx- xxxxxxx.xxxxx.xxx/Xxxxxxx/x/xxxx-xxx. You may also request a copy of the Product Fact Sheet from Your Access Account Manager.
Scope of Processing The subject-matter of Processing of Personal Data by Okta is the performance of the Service pursuant to the Agreement. The duration of the Processing, the nature and purpose of the Processing, the types of Personal Data and categories of Data Subjects Processed under this DPA are further specified in Appendix 1 to this DPA.
Purpose of Processing The purpose of the data Processing is the provision of the Services pursuant to this Agreement.
Description of Processing Include a description of how the disclosed information will be processed by each receiving party.
Duration of Processing The Parties will Process Shared Personal Data during the Term of the underlying RRA to which this this Data Processing Addendum is applicable, but will abide by the terms of this Data Processing Addendum for the duration of the Processing if in excess of that term, and unless otherwise agreed upon in writing.
Order Processing Any order by you for the purchase of shares of the respective Funds through us shall be accepted at the time when it is received by us (or any clearing house agency that we may designate from time to time), and at the offering and sale price next determined, unless rejected by us or the respective Funds. In addition to the right to reject any order, the Funds have reserved the right to withhold shares from sale temporarily or permanently. We will not accept any order from you that is placed on a conditional basis or subject to any delay or contingency prior to execution. The procedures relating to the handling of orders shall be subject to instructions that we shall forward from time to time to all members of the Selling Group. The shares purchased will be issued by the respective Funds only against receipt of the purchase price, in collected New York or Los Angeles Clearing House funds subject to deduction of all concessions on such sale (reallowance of any concessions to which you are entitled on purchases at net asset value will be paid through our direct purchase concession system). If payment for the shares purchased is not received within three days after the date of confirmation the sale may be cancelled forthwith, by us or by the respective Funds, without any responsibility or liability on our part or on the part of the Funds, and we and/or the respective Funds may hold you responsible for any loss, expense, liability or damage, including loss of profit suffered by us and/or the respective Funds, resulting from your delay or failure to make payment as aforesaid.
Security of processing (a) The data importer and, during transmission, also the data exporter shall implement appropriate technical and organisational measures to ensure the security of the data, including protection against a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access to that data (hereinafter ‘personal data breach’). In assessing the appropriate level of security, the Parties shall take due account of the state of the art, the costs of implementation, the nature, scope, context and purpose(s) of processing and the risks involved in the processing for the data subjects. The Parties shall in particular consider having recourse to encryption or pseudonymisation, including during transmission, where the purpose of processing can be fulfilled in that manner. In case of pseudonymisation, the additional information for attributing the personal data to a specific data subject shall, where possible, remain under the exclusive control of the data exporter. In complying with its obligations under this paragraph, the data importer shall at least implement the technical and organisational measures specified in Annex II. The data importer shall carry out regular checks to ensure that these measures continue to provide an appropriate level of security.
Sub-processing 1. The data importer shall not subcontract any of its processing operations performed on behalf of the data exporter under the Clauses without the prior written consent of the data exporter. Where the data importer subcontracts its obligations under the Clauses, with the consent of the data exporter, it shall do so only by way of a written agreement with the sub-processor which imposes the same obligations on the sub-processor as are imposed on the data importer under the Clauses. Where the sub-processor fails to fulfil its data protection obligations under such written agreement the data importer shall remain fully liable to the data exporter for the performance of the sub-processor’s obligations under such agreement.
Records of Processing Activities 6.1 The Data Processor shall keep records of all categories of processing activities performed on behalf of the Data Controller. Records of Processing activities shall include at least the following:
DOCUMENTATION; RECORDS OF PROCESSING Each party is responsible for its compliance with its documentation requirements, in particular maintaining records of processing where required under Data Protection Law. Each party shall reasonably assist the other party in its documentation requirements, including providing the information the other party needs from it in a manner reasonably requested by the other party (such as using an electronic system), in order to enable the other party to comply with any obligations relating to maintaining records of processing.
