Sisw Data Processing Agreement
You agree that we can share your customer data with subprocessors to provide you with the services. We impose contractual obligations on our subcontractors and contractually commit our subcontractors to impose contractual obligations on all other subcontractors who entrust them with the processing of customer data, which, in all essential areas, provide the same level of customer data protection as the contractual obligations imposed by this Privacy Statement, as this applies to the type of services provided by this subprocessor. A list of our current subprocessors when this data protection authority comes into effect is available in Schedule A below. These privacy rules apply when we process customer data. In this context, we act as a “data processor” for the customer, who can play the role of “data manager” for customer data (in accordance with EU data protection law). StructionSite, Inc. (the “data importer”) of each “party”; The “parties” agreed on the following contractual clauses (the clauses) in order to provide appropriate safeguards with respect to the protection of privacy and fundamental rights and individual freedoms with respect to the transfer by the data exporter of the personal data covered by Schedule 1 to the data importer. The data importer agrees and guarantees:a) to process personal data only on behalf of the data exporter and in accordance with its instructions and clauses; if, for whatever reason, it cannot provide for such compliance, it undertakes to immediately inform the data exporter of its inability to comply, in which case the data exporter is allowed to suspend the transmission of the data and/or terminate the contract;b) that it has no reason to believe that the applicable legislation prevents it from complying with the instructions received by the data exporter and its contractual obligations, and that, in the event of a change in this legislation, the data exporter has the right to suspend the transfer of data and/or terminate the contract; (c) that it implemented the technical and organizational security measures covered in Appendix 2 prior to the processing of personal data transmitted;d) that it implemented the technical and organizational security measures covered by Appendix 2; immediately notifies the data exporter as follows: (i) any legally binding request from a law enforcement service to disclose personal data, unless otherwise stated. For example, a criminal prohibition to preserve the confidentiality of a criminal investigation; (ii) any accidental or unauthorized access, and (iii) any request received directly by the persons concerned without responding to this request; unless it is empowered to do so; (e) without delay and on a regular basis, to process all requests from the exporter for the processing of personal data submitted to the transmission and to hold on to the supervisory authority`s board with respect to the processing of the data transmitted;f) at the request of the data manager, to present its processing facilities for the review of processing activities covered by the clauses implemented by the data exporter or by a control agency.
the required professional qualifications, bound by a duty of confidentiality, chosen, if necessary, by the data exporter, in agreement with the supervisory authority;g) make available to the person concerned, upon request, a copy of the clauses or an existing contract of sub-treatment; If the clauses or contract do not contain commercial information, in which case they can withdraw this commercial information, with the exception of Appendix 2, which are replaced by a summary description of security measures where the person concerned is unable to obtain a copy of the data exporter;h) to have previously informed the data exporter in the event of a subcontract and to have obtained prior written consent;i) that the processing services are being performed by the subcontractor in accordance with Article 11; j) the D