NDA Data Protection: The Importance, Its Meaning And Laws

NDA Data Protection: The Importance, Its Meaning And Laws

Cooperation Agreements were concluded / will be concluded between the Parties under specific terms and agreements set out in them.

In addition to the aforementioned agreements and for as long as the cooperation between them endures, the Parties agree and mutually accept the following:

NDA Data Protection

NDA Data Protection where the Parties recognize that for their cooperation to proceed, it is necessary to disclose certain information which is confidential information and trade secrets (hereinafter referred to as “Confidential Information”).

Whereas the Parties agree to accept the disclosure of such information on a confidentiality basis.

NOW, THEREFORE, in consideration of the promises and the covenants, conditions, and agreements and for other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the Parties hereby agree as follows:

1. The Parties undertake to use the Confidential Information only within the scope of the agreed purpose.
2. The Parties neither will disclose by their acts nor cause the disclosure of confidential information to any third party.
3. The Parties undertake to make confidential information known only to those of their employees who need to know it and at the same time undertake that the above persons are fully aware of the obligations of the Parties arising from the present agreement and that they assume the same obligations as those set out in this agreement.
4. The Parties undertake to preserve confidential information and to take all necessary measures to prevent disclosure to unauthorized persons.
5. All confidential information, including copies thereof, irrespective of their use, will remain the exclusive property of the Party that disclosed it and will be returned to it without delay upon expiration – for any reason – of the cooperation, or upon request.
6. The Parties agree that in the event that one of them fails to fulfill the above obligations, compensates and redresses any damage suffered (costs, expenses, consequences) of the other Party.
7. The Parties recognize that confidential information is a valuable business secret and that unauthorized disclosure of such information will cause irreparable harm to the other Party.
8. The Parties recognize that their obligations regarding confidential information, non-disclosure and non-use of such information will continue to apply if the co-operation expires or is replaced for any reason.

Notwithstanding the foregoing, the recipient may disclose Confidential Information to the extent that such disclosure is required by Law or Court order, provided, however, that the recipient provides to the disclosing party prior written notice of such disclosure and reasonable assistance in obtaining an order protecting the Confidential Information from public disclosure.

NDA DATA PROTECTION SAFETY SPECIFICATIONS

These terms govern the protection of NDA Data Protection exchanged between the Parties in the conte

xt and for the purposes of the cooperation agreement concluded or to be concluded. All terms are bilateral for the Parties.

DEFINITIONS

In the context of this Agreement, the following terms have the following meanings:

“Personal data protection Law”: refers to Regulation (EU) 679/2016, as amended, as well as to all applicable national and European legislation, on the protection of individuals with regard to the processing of personal data, the protection of NDA Data Protection and privacy in the electronic communications sector and any kind of restrictions or conditions regarding the Processing of Personal Data.

 “Processing” means any operation or set of operations which is performed on NDA Data Protection or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

“Data Protection Supervisory Authority” means the supervisory authority or other competent authority responsible for the monitoring of the application of the NDA Data Protection Law in the context of Processing under this agreement.

“Applicable Law”: all Laws, rules, regulations, regulatory provisions, including case Law, and any directive or circular of any Regulatory Authority and any applicable Code of Conduct as amended and are applicable to the Processing of NDA Data Protection or otherwise in the performance of the obligations of any of the parties herein.

 “Security Incident”: any accidental, unlawful or unauthorized loss, destruction, alteration, access, use, disclosure, damage or deterioration of the NDA Data Protection under process or otherwise any incident that may reasonably lead to accidental, unlawful or unauthorized loss, destruction, alteration, access, use, disclosure, damage or damage to the NDA Data Protection under process.

 “Personal Data” means any information relating to an identified or not directly or indirectly identifiable natural person and has the meaning assigned to it by the PNDA Data Protection Law and includes, but is not limited to, the following information: name and surname, age, date of birth, sex, address, contact details, identification documents issued by public authorities (e.g. passport, social security number), identity number, location data, an on-line identifier or any special information related to the physical condition, health, psychological condition, genetic material, mental, economic, cultural and social identity of that natural person.

“Contract” means the cooperation agreement/agreements between the Parties.

“Subcontractor” means any natural or legal person to whom the Parties entrust the performance of all or part of their obligations under this Agreement or who in any case processes on behalf of the Parties the Personal Data.

 “Services” means the services provided on the basis of the Parties’ agreement / agreements.

“Personal Data under process” is defined as the NDA Data Protection provided by any of the Parties to the other Party or the NDA Data Protection which are under process by any of the Parties on behalf of the other Party. NDA Data Protection under process include the following categories of data subjects and NDA Data Protection.

Also read: Top 25 Data Protection Statistics That You Must Be Informed

GENERAL OBLIGATIONS OF PARTIES

In fulfilling their obligations under the Contract, including the Processing of NDA Data Protection under process, the Parties are required to comply with the NDA Data Protection Law.

The Parties are not entitled to use or process the NDA Data Protection under process except to provide the Services specified in the Contract and only for the period specified in the Contract. If any such processing does not fall clearly within the scope of the agreed Services, the Parties shall not process such treatment unless there is a prior written instruction from the Party collecting the NDA Data Protection and provided that it is permissible by Law. The Parties are not entitled to use or process the NDA Data Protection under process except to provide the Services specified in the Contract and only for the period specified in the Contract. If any such processing does not fall clearly within the scope of the agreed Services, the Parties shall not process such treatment unless there is a prior written instruction from the Party collecting the NDA Data Protection and provided that it is permissible by Law.

Subject to clause 3 of this Annex (Subcontracting), the Parties will not disclose the NDA Data Protection under process to any third party, unless it is expressly required to do so by the Applicable Law. Each Party should take into account the suggestions of the other Party’s Data Protection Officer if they are lawful, recognizing in advance that such suggestions are aimed at the unimpeded cooperation of the Parties. Each party is solely responsible for receiving and processing NDA Data Protection that has come to its knowledge at the exercise of its commercial activity.

The Parties shall implement appropriate technical and organizational measures in accordance with applicable best practice and state of the art in the area of ​​activity concerned to protect the Personal Data under process from accidental or unlawful destruction or accidental loss (including deletion), alteration (including destruction), unauthorized disclosure, use or access and any other illegal form of Processing. In particular, the Parties will ensure that access tests, encryption and pseudonymisation measures are applied, that there is a regular testing and evaluation procedure for the effectiveness of technical and organizational measures for the security of the processing.

The Parties shall ensure that the Personal Data under process is accessible and processed only by the personnel of the Parties which is strictly necessary to carry out the duties currently available to them and that such personnel is properly trained in relation to the Processing of Personal Data and is bound by a confidentiality obligation with regard to the Processing of Personal Data.

SUBCONTRACTORS

The Parties may engage with reliable Subcontractors in fulfilling their obligations and for the provision of the Services, under the terms and conditions of the present agreement.

Any Subcontractor may process Personal Data only if it is necessary to fulfill the Parties’ obligations under the Contact and the Parties will make every effort to ensure that the Subcontractor will not process Personal Data for any other purpose.

SECURITY INCIDENT

In view of the purpose of the cooperation and in good faith, each Party shall notify the other Party as soon as possible once it becomes aware of any Security Incident through e-mail and this information shall include, wherever possible, the categories and approximate number of data subjects and records relevant to the incident, its impact and potential consequences and the affected data subjects from this Incident, as well as the corrective measures to be taken by the Parties.

The duty to cooperate extends to cases where a data subject withdraws his / her consent. It is expressly agreed that the above duty of information between the parties concerns security incidents that are relevant to the purpose of their cooperation, as is apparent from the relevant Contract.

Each Contracting Party shall implement, at its own expense (insofar as the Security Incident stems from a breach of its obligations hereunder), all remedies to address the causes of the Security Incident and shall provide all reasonable assistance to other Party in the course of the corrective actions to be taken by the latter.

CO-OPERATION AND FACILITATION

The Party that processes personal data received from the other Party will also notify the other Party within three working days if it receives communication from any person, public authority or any third party about the Personal Data under process and it will not respond in any application unless it is required to do so in accordance with the Applicable Law. In that respect, the other Party will promptly facilitate with all reasonable means the Contracting Party which collects and processes the personal data, in order for it to respond to such requests regarding the Personal Data under the statutory deadlines.

DURATION AND TERMINATION

Breach of any term of this Annex is ​​considered to be a material breach of the Contract.

It is expressly agreed that the obligations assumed by the Parties under this Annex shall survive the termination (by any means or in any manner) of the Contract.

FILE AND REPORTS

Each Contracting Party shall keep all records required by the Personal data protection Law and, at the request of the Party that collects the personal data, make it available to it.

Each Contracting Party shall have the right at its own expense and with prior notice and with the agreement of the other Party to conduct an audit of the systems, policies and procedures followed by the other Party in the processing of the Personal Data.

Such inspection may be carried out with the agreement of the Parties up to once a year, with the exception of inspections made at the request of a competent Data Protection Authority, which may be requested at any time or following a security incident. Upon completion of the above inspections, the Party that carried out the audit should notify the other Contracting Party of non-compliance to the data protection obligations set forth herein. In this case, the under-inspection Party will have to make any necessary changes to comply with these obligations.

Notwithstanding the foregoing, each Party is under an obligation to provide at the request of the other Party any necessary information demonstrating its compliance with the Personal Data Protection Law, including, inter alia, a copy of the Reports of every Independent Auditor, which relates to the compliance with this Agreement (subject to the limitation that it will not be made more than once a year).

INTERNATIONAL TRANSMISSIONS

Each Party shall be obliged to notify the other Party in advance of any processing by people or by any of its Subcontractors established outside the EU. Upon signing this Agreement, the processing of Personal Data by the Parties and the subcontractors may also take place in countries outside the EU.

In any case the transmission is in accordance to the Personal Data Protection Law.

Also read: How Being Data Protection Trained Can Help With Job Retention