2020-887-E Economic Dev - Submittable Holdings Inc grant management software

Browse Search

DocuSign Envelope ID:90A54439-23B9-40AF-8246-BFCAAEAA529D (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State; 4.2 that it has instructed, and throughout the duration of the personal data-processing services will instruct, the data importer to process the personal data transferred only on the data exporter's behalf and in accordance with the applicable data protection law and the Clauses; 4.3 that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix B of the DPA; 4.4 that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation; 4.5 that it will ensure compliance with the security measures; 4.6 that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC; 4.7 to forward any notification received from the data importer or any sub-processor pursuant to clause 5.2 and clause 8.3 to the data protection Supervisory Authority if the data exporter decides to continue the transfer or to lift the suspension; 4.8 to make available to the data subjects upon request a copy of the Clauses, and a summary description of the security measures, as well as a copy of any contract for sub-processing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information; 4.9 that, in the event of sub-processing, the processing activity is carried out in accordance with clause 11 by a sub-processor providing at least the same level of protection for the personal data and the rights of data subjects as the data importer under the Clauses; and 4.10 that it will ensure compliance with clause 4.1 to clause 4.9. 5. Obliyations of the data importer. The data importer agrees and warrants: 5.1 to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; 5.2 that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract; 5.3 that it has implemented the technical and organisational security measures specified in Appendix B of the DPA before processing the personal data transferred; Submittable Customer Terms of Service v1.1—Exhibit B,Appendix C Page 3 of 8