2025-033 - Laserfiche WebLink

Home Browse Search

A TRUE COPY CERTIFICATION ON LAST PAGE RYAN L. BUTLER, CLERK for (i) the lawfulness of any transfer of Personal Data to PSTA, (ii) the accuracy, quality, and legality of Personal Data provided to PSTA; (iii) the means by which Member acquired Personal Data, and (iv) the provision of any required notices to, and obtaining any necessary acknowledgements, authorizations or consents from Data Subjects. Member takes full responsibility to keep the amount of Personal Data provided to PSTA to the minimum necessary for PSTA to perform in accordance with the Agreement. 5.6. PSTA as a Controller or Joint Controller. In all instances where PSTA acts as a Controller it must comply with the applicable provisions of the PSTA Privacy Statement at https://www.PSTAsolutions.com/en us/about/privacy-policy.html#privacystatement as each may be updated from time to time. PSTA holds all Member Contact Data as a Controller and must Process such Member Contact Data in accordance with the PSTA Privacy Statement. In instances where PSTA is acting as a Joint Controller with Member, the Parties must enter into a separate addendum to the Agreement to allocate the respective roles as joint controllers. 5.7 Sub -processors. 5.7.1 Use of Sub -processors. Member agrees that PSTA may engage Sub -processors who in turn may engage Sub -processors to Process Content Materials, including Personal Data in accordance with this Agreement. A current list of Sub -processors is set forth at Annex II When engaging Sub -processors, PSTA must enter into agreements with the Sub -processors to bind them to obligations which are substantially similar or more stringent than those set out in this Agreement. 5.7.2 Changes to Sub -processing. The Member hereby consents to PSTA engaging Sub -processors to process Member Data provided that: (i) PSTA must use its reasonable endeavors to provide prior notice of the addition or removal of any Sub -processor, which may be given by posting details of such addition or removal at a URL provided to Member in Annex II; (ii) PSTA imposes data protection terms on any Sub -processor it appoints that protect the Personal Data to the same standard provided for by this Agreement; and (iii) PSTA remains fully liable for any breach of this clause that is caused by an act, error or omission of its Sub-processor(s). The Member may object to PSTA's appointment or replacement of a Sub -processor prior to its appointment or replacement, provided such objection is based on reasonable grounds relating to data protection. In such event, PSTA will either appoint or replace the Sub -processor or, if in PSTA's discretion this is not feasible, the Customer may terminate this Agreement. 5.8. Data Subject Requests. PSTA must, to the extent legally permitted, promptly notify Member if it receives a request from a Data Subject, including without limitation requests for access to, correction, amendment, transport or deletion of such Data Subject's Personal Data and, to the extent applicable, PSTA must provide Member with commercially reasonable cooperation and assistance in relation to any complaint, notice, or communication from a Data Subject. Member must respond to and resolve promptly all requests from Data Subjects which PSTA provides to Member. Member must be responsible for any reasonable costs arising from PSTA's provision of such assistance under this Section. 5.9. Data Transfers. PSTA agrees that it must not make transfers of Personal Data under this Agreement from one country's jurisdiction to another unless such transfers are performed in compliance with this Agreement and applicable Data Protection Laws. PSTA agrees to enter into appropriate agreements with its affiliates and Sub -processors, which will permit PSTA to transfer Personal Data to its affiliates and Sub -processors. PSTA agrees to amend as necessary its agreement with Member to permit transfer of Personal Data from PSTA to Member. PSTA also agrees to assist the Member in entering into agreements with its affiliates and Sub -processors if required by applicable Data Protection Laws for necessary transfers.