V9.7 01/05/20
UD0011
Page 176 of 177
This Document is uncontrolled when printed unless over stamped “CONTROLLED DOCUMENT"
transmitted, stored or otherwise Processed (“Data Security Breach”). Where, and in so far as, it is not
possible to provide all the relevant information at the same time, the information may be provided in
phases without undue further delay;
17.8.2 except to Authorised Sub-Processors, not disclose the Agreement Personal Data to a third party save
as required for the performance of its obligations under this EULA, as otherwise provided under this
EULA, or as required by Applicable Law;
17.8.3 notify the Customer without undue delay of any notice or communication from the Supervisory
Authority which relates directly to the Processing of Agreement Personal Data;
17.8.4 ensure that any individual authorised to Process Agreement Personal Data on behalf of the Customer
is subject to appropriate statutory or contractual obligation of confidentiality;
17.8.5 will upon reasonable notice, no more than once in any one calendar year, subject to appropriate
confidentiality agreements being entered into, make available to the Customer all reasonable
information relating to the Processing of Agreement Personal Data necessary to demonstrate
compliance with the obligations set out in this EULA to the extent such information is not already
available to the Customer; and allow for and contribute to one audit in any one calendar year, including
inspection, conducted by the Customer or another auditor mandated by the Customer to that same
extent solely to the extent relevant to the Processing of Agreement Personal Data;
17.8.6 to the extent required by Data Protection Laws, notify and provide reasonable assistance to the
Customer on receiving any:
17.8.6.1
complaint by a Data Subject in respect of their Personal Data contained in the
Agreement Personal Data or any request received from a Data Subject to have
access to his Personal Data (or to exercise any other right(s) afforded to him under
the Data Protection Laws) as contained in the Agreement Personal Data (including
by appropriate technical and organisational measures, insofar as this is possible);
17.8.6.2
notice or communication from the Supervisory Authority which relates to the
processing of Agreement Personal Data;
17.8.7 to the extent required by Data Protection Laws, reasonably assist the Customer in:
17.8.7.1
taking measures to address any Data Security Breach; and
17.8.7.2
conducting privacy impact assessments of any Processing operations and consulting
with any applicable Supervisory Authority;
17.8.8 only share Agreement Personal Data with the Authorised Sub- Processors to carry out the services
provided that, to the extent the Authorised Sub-Processor is located outside the UK or the European
Union, the Company will implement measures to ensure an adequate level of protection for the rights
and freedoms of the relevant individuals in relation to the transfer of any Personal Data, except to the
extent that the transfer is (i) to a country that the European Commission has recognised as providing
adequate protection for such transfer from time to time and/or (ii) otherwise expressly permitted by
Data Protection Laws.
17.9
At the option of the Customer, the Company shall securely delete or return to the Customer all Agreement
Personal Data promptly following termination of this EULA and shall securely delete any remaining copies.
