Orange County NC Website
Browse       Search
DocuSign Envelope ID:90A54439-23B9-40AF-8246-BFCAAEAA529D <br /> (b) to a Data Subject when exercising his or her rights under the GDPR as permitted <br /> by this DPA; <br /> (c) to comply with applicable Law; or <br /> (d) as authorized in writing or appropriate electronic consent by Customer. <br /> 3.2 Submittable must promptly comply with any reasonable and lawful Customer request or <br /> instruction requiring Submittable to amend, transfer, or delete the Personal Information, or to stop, <br /> mitigate, or remedy any unauthorized processing. <br /> 3.3 Submittable will appoint a data protection officer where such appointment is required by <br /> Privacy and Data Protection Requirements. The appointed person may be reached at <br /> privacy@submittable.com. <br /> 3.4 Submittable will treat all Personal Information as Confidential Information, will not sell <br /> it to anyone, and will not disclose it to third parties unless Customer or this DPA specifically <br /> authorizes the disclosure, or as required by Law. <br /> 3.5 Submittable will reasonably assist Customer with meeting Customer's compliance <br /> obligations under the Privacy and Data Protection Requirements, taking into account the nature of <br /> Submittable's Processing and the information available to Submittable. <br /> 3.6 Submittable must promptly notify Customer of any changes to Privacy and Data <br /> Protection Requirements that may adversely affect Submittable's performance of the TOS. <br /> 3.7 Customer acknowledges that Submittable is under no duty to investigate the <br /> completeness, accuracy, or sufficiency of any specific Customer instructions or the Personal <br /> Information other than as required under the Privacy and Data Protection Requirements. <br /> 3.8 Submittable will only collect Personal Information for Customer using a notice or method <br /> which contains an approved data privacy notice informing the Data Subject of Customer's identity, <br /> the purpose or purposes for which their Personal Information will be processed, and any other <br /> information that is required by applicable Privacy and Data Protection Requirements. <br /> 3.9 Submittable will store any and all Personal Information in the United States, except that <br /> Submittable will not be responsible for any third party (including End Users) obtaining, storing, <br /> transmitting, transporting, using, or accessing Personal Information outside the United States or for <br /> Personal Information obtained outside the United States. <br /> 4. Submittable's Employees. <br /> 4.1 Submittable will limit Personal Information access to: <br /> (a) those employees who require Personal Information access to meet Submittable's <br /> obligations under this DPA and the TOS; and <br /> (b) the part or parts of the Personal Information that those employees strictly require <br /> for the performance of their duties. <br /> 4.2 Submittable shall take industry standard, commercially, and technically reasonable <br /> steps to ensure the reliability of any work done by Submittable personnel engaged in the Processing <br /> of Personal Information. <br /> 4.3 Submittable will ensure that all employees: <br /> (a) are informed of the Personal Information's confidential nature and use <br /> restrictions; <br /> (b) have undertaken training on the Privacy and Data Protection Requirements <br /> relating to handling Personal Information and how it applies to their particular duties; and <br /> Submittable Customer Terms of Service v1.1—Exhibit B Page 3 of 12 <br />