9.1. The following definitions are used in this Section 9:
9.1.1. CCPA means the California Consumer Privacy Act of 2018, Cal. Civ. Code §§ 1798.100 et. Seq, as
amended.
9.1.2. Data Controller, Data Processor, Data Subject, Personal Data, Data Breach, Processing, Processed and Process and appropriate technical and organizational measures shall have the meaning as defined in the Data Protection Legislation.
9.1.3. Data Protection Legislation means any and all applicable privacy and data protection laws and regulations, including, where applicable, the EU Data Protection Law, Swiss Data Protection Laws, the UK Data Protection Law and the CCPA, as all may be amended or superseded from time to
time.
9.1.4. EU Data Protection Law” means the (i) EU General Data Protection Regulation (Regulation 2016/679) (“GDPR”); (ii) Regulation 2018/1725; (iii) the EU e-Privacy Directive (Directive
2002/58/EC), as amended (e-Privacy Law); (iv) any national data protection laws made under, pursuant to, replacing or succeeding (i) – (iii); and (iv) any legislation replacing or updating any of the foregoing.
9.1.5. Swiss Data Protection Laws” or “FADP” means the Swiss Federal Act on Data Protection of June 19, 1992, SR 235.1, and any other applicable data protection or privacy laws of the Swiss Confederation as amended, revised, consolidated, re-enacted or replaced from time to time, to the extent applicable to the processing of Personal Data under this Agreement.
9.1.6. UK Data Protection Laws” means the Data Protection Act 2018 (DPA 2018), as amended, and the EU General Data Protection Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, as incorporated into UK law as the UK GDPR, and any other applicable UK data protection laws, or regulatory Codes of Conduct or other guidance that may be issued from time to time.
9.1.7. Data protection laws may be modified from time to time and the Company will endeavor to provide written notice (which may include in-application notice) of any applicable updates.
9.2. The Company takes privacy extremely seriously and will comply with the terms of its privacy policy, the link for which is set forth on the Company’s main website.
9.3. Each of the parties agree to comply with all applicable requirements of any relevant Data Protection Legislation and agree to the provisions of the Company’s Data Processing Addendum, the link to which is set forth on the Company’s main website (the “DPA”), which, to the extent applicable, is incorporated herein by reference and is subject to all of the terms and conditions of this Agreement. This is in addition to, and does not relieve, remove or replace, either party’s obligations under the Data Protection Legislation.
9.4. You warrant to the Company that you have taken all steps that are required to enable the Company to process your Personal Data in compliance with all Data Protection Laws and any other applicable laws, enactments, regulations, orders, standards and other similar instruments, including without limitation that you have in place the necessary notices and consents from Data Subjects for you to lawfully transfer their Personal Data to the Company, or have another appropriate legal basis in place to enable lawful transfer of the Personal Data to the Company and for the Company to process, use and transfer such personal data in connection with the provision of the Products and Services.
9.5. “Confidential Information” of a party includes but is not limited to such party’s (or its Affiliate’s) nonpublic: inventions, discoveries, improvements, and copyrightable material not yet patented, published, or copyrighted; trade secrets, source code, algorithms; special processes and methods, whether for production purposes or otherwise, and special apparatus and equipment not generally available or known to the public; current engineering research, development, design projects, research and development data, technical specifications, plans, drawings and sketches; financial, audit and security information, business information such as product costs, vendor and customer lists, lists of approved components and sources, price lists, production schedules, business plans, and sales and profit or loss information not yet announced or not disclosed in any other way to the public; and any other information or knowledge not generally available to the public. All business terms of this Agreement, including, but not limited to, pricing and access/login details, details of the Service, Company Properties, Customer Content (defined below in Section 11.2) and your data shall be considered Confidential Information hereunder.
9.6. Each party shall keep in confidence all Confidential Information of the other party obtained prior to or during this Agreement and shall protect the confidentiality of such information in a manner consistent with the manner in which such party treats its own confidential material, but in no event with less than reasonable care. Without the prior written consent of the other party, a party shall not disclose or make available any portion of the other party’s Confidential Information to any person, firm, association, or corporation, or use such Confidential Information, directly or indirectly, except for the performance of this Agreement. The foregoing restrictions shall not apply to Confidential Information that:
9.6.1. was known to such party (as evidenced by its written record) or was in the public domain prior to the time obtained by such party;
9.6.2. was lawfully disclosed to such party by a third party who did not receive it directly or indirectly from such party and who is under no obligation of secrecy with respect to the Confidential Information;
9.6.3. became generally available to the public, by publication or otherwise, through no fault of such party; or
9.6.4. was developed independently by the receiving party as evidenced by written records without reference to the Confidential Information of the other party.
9.7. Company maintains a right to publish the logos of its customers and certified partners on its website and other Company owned properties.
9.8. The parties shall take all necessary and appropriate steps in order to ensure that its employees and subcontractors adhere to the provisions of this Section 9. All Confidential Information shall be returned to
the disclosing party or destroyed upon receipt by the receiving party of a written request from the disclosing party. The receiving party may disclose the disclosing party’s Confidential Information to the extent required by law or legal process, provided, however, the receiving party will (unless prohibited by law or legal process): (a) give the disclosing party prior written notice of such disclosure to afford the disclosing party a reasonable opportunity to appear, object, and obtain a protective order or other appropriate relief regarding such disclosure; (b) use diligent efforts to limit disclosure to that which is legally required; and (c) reasonably cooperate with the disclosing party, at the disclosing party’s expense, in its efforts to obtain a protective order or other legally available means of protection.
9.9. The obligations under this Section 9 shall extend for five (5) years after termination or expiration of this Agreement, and Confidential Information that is a trade secret under applicable law shall survive thereafter so long as such Confidential Information constitutes a trade secret (without regard to any breach by a receiving party of its obligations hereunder).