{"id":1082,"date":"2020-11-24T14:49:27","date_gmt":"2020-11-24T14:49:27","guid":{"rendered":"https:\/\/l.monday.com\/l\/non-classifiee\/standard-contractual-clauses\/"},"modified":"2021-04-22T10:38:06","modified_gmt":"2021-04-22T10:38:06","slug":"clauses-contractuelles-types","status":"publish","type":"post","link":"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/","title":{"rendered":"Clauses contractuelles types (CCT) (du responsable du traitement au sous-traitant)"},"content":{"rendered":"\n<p><a href=\"https:\/\/na3.docusign.net\/Member\/PowerFormSigning.aspx?PowerFormId=176ad33c-8ca7-46b3-9346-6025450622b9&amp;env=na3&amp;acct=2b5df10d-1b22-4e99-a6c2-f88dc659b4f6&amp;v=2\"><strong>Signer la version en ligne<\/strong><\/a><\/p>\n\n\n\n<p>L&rsquo;exportateur de donn\u00e9es et l&rsquo;importateur de donn\u00e9es, tel que d\u00e9finis dans <a href=\"https:\/\/monday.com\/l\/fr\/confidentialite\/dpa\/\">l&rsquo;addendum relatif au traitement des donn\u00e9es de monday.com<\/a> ou par tout autre accord ou addendum effectivement r\u00e9gissant le traitement des donn\u00e9es personnelles par l&rsquo;importateur de donn\u00e9es pour le compte de l&rsquo;exportateur de donn\u00e9es, dont tous les annexes, et pi\u00e8ces y aff\u00e9rents (\u00ab<strong>DPA<\/strong>\u00bb), chacune \u00e9tant une \u00ab\u00a0<strong>\u00a0partie\u00a0<\/strong>\u00a0\u00bb\u00a0; ensemble, les \u00ab\u00a0<strong>parties<\/strong>\u00a0\u00bb, ont accept\u00e9 les Clauses contractuelles (\u00ab<strong>\u00a0Clauses\u00a0<\/strong>\u00bb) suivantes (afin de pr\u00e9senter des garanties appropri\u00e9es en ce qui concerne la protection de la vie priv\u00e9e et les droits fondamentaux et libert\u00e9s des personnes pour le transfert par l&rsquo;exportateur de donn\u00e9es \u00e0 l&rsquo;importateur de donn\u00e9es personnelles sp\u00e9cifi\u00e9es \u00e0 l&rsquo;annexe 1.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 1 \u2013 D\u00e9finitions<\/h2>\n\n\n\n<p>Aux fins des Clauses&nbsp;:<\/p>\n\n\n\n<p>a) \u00ab&nbsp;donn\u00e9es personnelles&nbsp;\u00bb, \u00ab&nbsp;cat\u00e9gories particuli\u00e8res de donn\u00e9es&nbsp;\u00bb, \u00ab&nbsp;processus\/traitement&nbsp;\u00bb, \u00ab&nbsp;responsable du traitement&nbsp;\u00bb, \u00ab&nbsp;sous-traitant&nbsp;\u00bb, \u00ab&nbsp;personne concern\u00e9e&nbsp;\u00bb et \u00ab&nbsp;autorit\u00e9 de contr\u00f4le&nbsp;\u00bb ont la m\u00eame signification que dans la directive 95\/46\/CE du Parlement europ\u00e9en et du Conseil du 24 octobre 1995 relatives \u00e0 la protection des personnes physiques \u00e0 l&rsquo;\u00e9gard du traitement des donn\u00e9es personnelles et \u00e0 la libre circulation de ces donn\u00e9es ;<\/p>\n\n\n\n<p>(b) \u00ab&nbsp;l&rsquo;exportateur de donn\u00e9es&nbsp;\u00bb d\u00e9signe le responsable du traitement qui transf\u00e8re les donn\u00e9es personnelles&nbsp;;<\/p>\n\n\n\n<p>c) \u00ab&nbsp;l&rsquo;importateur de donn\u00e9es&nbsp;\u00bb d\u00e9signe le sous-traitant qui accepte de recevoir de l&rsquo;exportateur de donn\u00e9es des donn\u00e9es personnelles destin\u00e9es \u00e0 \u00eatre trait\u00e9es pour son compte apr\u00e8s le transfert conform\u00e9ment \u00e0 ses instructions et aux termes des clauses et qui n&rsquo;est pas soumis au syst\u00e8me d&rsquo;un pays tiers assurant une protection ad\u00e9quate au sens de l&rsquo;article 25, paragraphe 1, de la directive 95\/46\/CE&nbsp;;<\/p>\n\n\n\n<p>d) \u00ab&nbsp;le sous-traitant ult\u00e9rieur&nbsp;\u00bb d\u00e9signe tout sous-traitant engag\u00e9 par l&rsquo;importateur de donn\u00e9es ou par tout autre sous-traitant ult\u00e9rieur de l&rsquo;importateur de donn\u00e9es qui accepte de recevoir de l&rsquo;importateur de donn\u00e9es ou de tout autre sous-traitant ult\u00e9rieur de l&rsquo;importateur de donn\u00e9es, des donn\u00e9es personnelles exclusivement destin\u00e9es \u00e0 des activit\u00e9s de traitement \u00e0 effectuer pour le compte de l&rsquo;exportateur de donn\u00e9es apr\u00e8s le transfert conform\u00e9ment \u00e0 ses instructions, aux termes des clauses et aux termes du contrat de sous-traitance \u00e9crit&nbsp;;<\/p>\n\n\n\n<p>(e) \u00ab&nbsp;la loi applicable en mati\u00e8re de protection des donn\u00e9es<strong>&nbsp;\u00bb <\/strong>d\u00e9signe la l\u00e9gislation prot\u00e9geant les droits et libert\u00e9s fondamentaux des individus et, en particulier, leur droit \u00e0 la vie priv\u00e9e en ce qui concerne le traitement des donn\u00e9es personnelles applicables \u00e0 un responsable du traitement dans l&rsquo;\u00c9tat membre dans lequel l&rsquo;exportateur de donn\u00e9es est \u00e9tabli&nbsp;;<\/p>\n\n\n\n<p>f) \u00ab&nbsp;les mesures techniques et organisationnelles de s\u00e9curit\u00e9&nbsp;\u00bb d\u00e9signent les mesures visant \u00e0 prot\u00e9ger les donn\u00e9es personnelles contre la destruction accidentelle ou illicite, la perte accidentelle, l&rsquo;alt\u00e9ration, la divulgation ou l&rsquo;acc\u00e8s non autoris\u00e9s, en particulier lorsque le traitement implique la transmission de donn\u00e9es par r\u00e9seau, et contre toute autre forme illicite de traitement.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 2 \u2013 D\u00e9tails du transfert<\/h2>\n\n\n\n<p>Les d\u00e9tails du transfert et, en particulier, les cat\u00e9gories sp\u00e9ciales des donn\u00e9es personnelles, le cas \u00e9ch\u00e9ant, sont sp\u00e9cifi\u00e9s \u00e0 l&rsquo;annexe 1 qui fait partie int\u00e9grante des Clauses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 3 &#8211; Clause de tiers b\u00e9n\u00e9ficiaire<\/h2>\n\n\n\n<p>1. La personne concern\u00e9e peut faire valoir \u00e0 l&rsquo;\u00e9gard de l&rsquo;exportateur de donn\u00e9es la pr\u00e9sente clause, la clause 4(b) \u00e0 (i), la clause 5(a) \u00e0 (e) et (g) \u00e0 (j), la clause 6(1) et (2), la clause 7, la clause 8(2) et les clauses 9 \u00e0 12 en tant que b\u00e9n\u00e9ficiaire tiers.<\/p>\n\n\n\n<p>2. La personne concern\u00e9e peut faire valoir \u00e0 l&rsquo;\u00e9gard de l&rsquo;importateur de donn\u00e9es la pr\u00e9sente Clause, la Clause 5 (a) \u00e0 (e) et (g), la Clause 6, la Clause 7, la Clause 8(2), et les Clauses 9 \u00e0 12, dans les cas o\u00f9 l&rsquo;exportateur de donn\u00e9es a disparu mat\u00e9riellement ou a cess\u00e9 d&rsquo;exister en droit, \u00e0 moins qu&rsquo;une entit\u00e9 rempla\u00e7ante n&rsquo;ait assum\u00e9 l&rsquo;ensemble des obligations l\u00e9gales de l&rsquo;exportateur de donn\u00e9es par contrat ou par effet de la loi, de sorte qu&rsquo;elle assume les droits et obligations de l&rsquo;exportateur de donn\u00e9es, auquel cas la personne concern\u00e9e peut les faire valoir \u00e0 l&rsquo;encontre de cette entit\u00e9.<\/p>\n\n\n\n<p>3. La personne concern\u00e9e peut faire appliquer \u00e0 l&rsquo;encontre du sous-traitant ult\u00e9rieur la pr\u00e9sente Clause, Clause 5(a) \u00e0 (e) et (g), Clause 6, Clause 7, Clause 8(2) et Clauses 9 \u00e0 12, dans les cas o\u00f9 l&rsquo;exportateur de donn\u00e9es et l&rsquo;importateur de donn\u00e9es ont disparu mat\u00e9riellement ou ont cess\u00e9 d&rsquo;exister en droit ou sont devenus insolvables, \u00e0 moins qu&rsquo;une entit\u00e9 successeur n&rsquo;ait assum\u00e9 l&rsquo;ensemble des obligations juridiques de l&rsquo;exportateur de donn\u00e9es par contrat ou par effet de la loi \u00e0 la suite desquelles il prend en charge les droits et obligations de l&rsquo;exportateur de donn\u00e9es, auquel cas la personne concern\u00e9e peut les faire valoir \u00e0 cette entit\u00e9. Cette responsabilit\u00e9 tierce du sous-traitant ult\u00e9rieur sera limit\u00e9e \u00e0 ses propres op\u00e9rations de traitement en vertu des clauses.<\/p>\n\n\n\n<p>4. Les parties ne s&rsquo;opposent pas \u00e0 ce qu&rsquo;une personne concern\u00e9e soit repr\u00e9sent\u00e9e par une association ou un autre organisme si la personne concern\u00e9e le souhaite express\u00e9ment et si le droit national le permet.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 4 \u2013 Obligations de l&rsquo;exportateur de donn\u00e9es<\/h2>\n\n\n\n<p>L&rsquo;exportateur de donn\u00e9es accepte et garantit&nbsp;:<\/p>\n\n\n\n<p>(a) que le traitement, y compris le transfert lui-m\u00eame, des donn\u00e9es \u00e0 caract\u00e8re personnel a \u00e9t\u00e9 et continuera d&rsquo;\u00eatre effectu\u00e9 conform\u00e9ment aux dispositions pertinentes de la l\u00e9gislation applicable en mati\u00e8re de protection des donn\u00e9es (et, le cas \u00e9ch\u00e9ant, a \u00e9t\u00e9 notifi\u00e9 aux autorit\u00e9s comp\u00e9tentes de l&rsquo;\u00c9tat membre o\u00f9 l&rsquo;exportateur de donn\u00e9es est \u00e9tabli) et ne viole pas les dispositions pertinentes de cet \u00c9tat&nbsp;;<\/p>\n\n\n\n<p>(b) qu&rsquo;il a donn\u00e9 des instructions et que, pendant toute la dur\u00e9e des services de traitement des donn\u00e9es personnelles, il donnera des instructions \u00e0 l&rsquo;importateur de donn\u00e9es afin de traiter les donn\u00e9es personnelles transf\u00e9r\u00e9es uniquement pour le compte de l&rsquo;exportateur de donn\u00e9es et conform\u00e9ment \u00e0 la l\u00e9gislation applicable en mati\u00e8re de protection des donn\u00e9es et aux Clauses&nbsp;;<\/p>\n\n\n\n<p>(c) que l&rsquo;importateur de donn\u00e9es fournira des garanties suffisantes en ce qui concerne les mesures de s\u00e9curit\u00e9 techniques et organisationnelles sp\u00e9cifi\u00e9es \u00e0 l&rsquo;Annexe 2 du pr\u00e9sent contrat&nbsp;;<\/p>\n\n\n\n<p>(d) qu&rsquo;apr\u00e8s \u00e9valuation des exigences de la loi applicable en mati\u00e8re de protection des donn\u00e9es, les mesures de s\u00e9curit\u00e9 sont appropri\u00e9es pour prot\u00e9ger les donn\u00e9es personnelles contre destruction ou perte, modification, divulgation ou acc\u00e8s accidentels ou illicites, en particulier lorsque le traitement implique la transmission de donn\u00e9es par r\u00e9seau, et contre toutes les autres formes de traitement illicites, et que ces mesures garantissent un niveau de s\u00e9curit\u00e9 appropri\u00e9 aux risques pr\u00e9sent\u00e9s par le traitement et la nature des donn\u00e9es \u00e0 prot\u00e9ger compte tenu des techniques les plus r\u00e9centes et du co\u00fbt de leur mise en \u0153uvre&nbsp;;<\/p>\n\n\n\n<p>(e) qu&rsquo;il veillera au respect des mesures de s\u00e9curit\u00e9&nbsp;;<\/p>\n\n\n\n<p>(f) que, si le transfert concerne des cat\u00e9gories particuli\u00e8res de donn\u00e9es, la personne concern\u00e9e a \u00e9t\u00e9 inform\u00e9e ou sera inform\u00e9e avant, ou le plus t\u00f4t possible apr\u00e8s, le transfert que ses donn\u00e9es pourraient \u00eatre transmises \u00e0 un pays tiers n&rsquo;assurant pas une protection ad\u00e9quate au sens de la directive 95\/46\/CE&nbsp;;<\/p>\n\n\n\n<p>(g) de transmettre toute notification re\u00e7ue de l&rsquo;importateur de donn\u00e9es ou de tout sous-traitant ult\u00e9rieur conform\u00e9ment \u00e0 la Clause 5(b), et \u00e0 la Clause 8(3), \u00e0 l&rsquo;autorit\u00e9 de contr\u00f4le de la protection des donn\u00e9es si l&rsquo;exportateur de donn\u00e9es d\u00e9cide de poursuivre le transfert ou de lever la suspension&nbsp;;<\/p>\n\n\n\n<p>(h) de mettre \u00e0 la disposition des personnes concern\u00e9es, sur demande, une copie des Clauses, \u00e0 l&rsquo;exception de l&rsquo;annexe 2, et une description sommaire des mesures de s\u00e9curit\u00e9, ainsi qu&rsquo;une copie de tout contrat de services de sous-traitance qui doit \u00eatre conclu conform\u00e9ment aux clauses, \u00e0 moins que les clauses ou le contrat ne contiennent des informations commerciales, auquel cas il peut supprimer ces informations commerciales&nbsp;;<\/p>\n\n\n\n<p>(i) que, en cas de sous-traitance, l&rsquo;activit\u00e9 de traitement soit effectu\u00e9e conform\u00e9ment \u00e0 la Clause 11 par un sous-traitant offrant au moins le m\u00eame niveau de protection des donn\u00e9es \u00e0 caract\u00e8re personnel et des droits de la personne concern\u00e9e que l&rsquo;importateur de donn\u00e9es en vertu des Clauses et<\/p>\n\n\n\n<p>(j) qu&rsquo;il garantira le respect de la Clause 4(a) \u00e0 (i).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 4 \u2013 Obligations de l&rsquo;exportateur de donn\u00e9es<\/h2>\n\n\n\n<p>L&rsquo;exportateur de donn\u00e9es accepte et garantit&nbsp;:<\/p>\n\n\n\n<p>(a) de traiter les donn\u00e9es personnelles uniquement pour le compte de l&rsquo;exportateur de donn\u00e9es et conform\u00e9ment \u00e0 ses instructions et aux Clauses&nbsp;; s&rsquo;il ne peut assurer cette conformit\u00e9 pour quelque raison que ce soit, il accepte d&rsquo;informer rapidement l&rsquo;exportateur de donn\u00e9es de son incapacit\u00e9, auquel cas l&rsquo;exportateur de donn\u00e9es a le droit de suspendre le transfert de donn\u00e9es et\/ou de r\u00e9silier le contrat&nbsp;;<\/p>\n\n\n\n<p>(b) qu&rsquo;il n&rsquo;a aucune raison de croire que la l\u00e9gislation qui s&rsquo;y applique l&#8217;emp\u00eache de remplir les instructions re\u00e7ues de l&rsquo;exportateur de donn\u00e9es et ses obligations en vertu du contrat et qu&rsquo;en cas de modification de cette l\u00e9gislation susceptible d&rsquo;avoir un effet n\u00e9gatif substantiel sur les garanties et obligations fournies par les Clauses, il en informera rapidement l&rsquo;exportateur de donn\u00e9es d\u00e8s qu&rsquo;il en est inform\u00e9, auquel cas l&rsquo;exportateur de donn\u00e9es a le droit de suspendre le transfert de donn\u00e9es et\/ou de r\u00e9silier le contrat&nbsp;;<\/p>\n\n\n\n<p>(c) qu&rsquo;il a mis en \u0153uvre les mesures techniques et organisationnelles de s\u00e9curit\u00e9 sp\u00e9cifi\u00e9es \u00e0 l&rsquo;annexe 2 avant de traiter les donn\u00e9es personnelles transf\u00e9r\u00e9es&nbsp;;<\/p>\n\n\n\n<p>(d) qu&rsquo;il informera rapidement l&rsquo;exportateur de donn\u00e9es des \u00e9l\u00e9ments suivants&nbsp;:<\/p>\n\n\n\n<p>(i) toute demande l\u00e9galement contraignante de divulgation des donn\u00e9es personnelles par une autorit\u00e9 charg\u00e9e de l&rsquo;application de la loi, sauf interdiction contraire, telle qu&rsquo;une interdiction en vertu de la loi p\u00e9nale de pr\u00e9server la confidentialit\u00e9 d&rsquo;une enqu\u00eate d&rsquo;application de la loi,<\/p>\n\n\n\n<p>(ii) tout acc\u00e8s accidentel ou non autoris\u00e9 et<\/p>\n\n\n\n<p>(iii) toute demande re\u00e7ue directement des personnes concern\u00e9es sans r\u00e9pondre \u00e0 cette demande, sauf autorisation contraire&nbsp;;<\/p>\n\n\n\n<p>(e) de traiter rapidement et correctement toutes les demandes de l&rsquo;exportateur de donn\u00e9es relatives \u00e0 son traitement des donn\u00e9es personnelles faisant l&rsquo;objet du transfert et de se conformer \u00e0 l&rsquo;avis de l&rsquo;autorit\u00e9 de contr\u00f4le en ce qui concerne le traitement des donn\u00e9es transf\u00e9r\u00e9es&nbsp;;<\/p>\n\n\n\n<p>(f) \u00e0 la demande de l&rsquo;exportateur de donn\u00e9es de soumettre ses installations de traitement des donn\u00e9es pour v\u00e9rification des activit\u00e9s de traitement couvertes par les Clauses qui doivent \u00eatre effectu\u00e9es par l&rsquo;exportateur de donn\u00e9es ou un organisme d&rsquo;inspection compos\u00e9 de membres ind\u00e9pendants et en possession des qualifications professionnelles requises li\u00e9es par une obligation de confidentialit\u00e9, s\u00e9lectionn\u00e9e par l&rsquo;exportateur de donn\u00e9es, le cas \u00e9ch\u00e9ant, en accord avec l&rsquo;autorit\u00e9 de contr\u00f4le&nbsp;;<\/p>\n\n\n\n<p>(g) de mettre \u00e0 la disposition de la personne concern\u00e9e par les donn\u00e9es sur demande une copie des Clauses, ou tout contrat de sous-traitance existant, sauf si les Clauses ou le contrat contiennent des informations commerciales, auquel cas elles peuvent supprimer ces informations commerciales, \u00e0 l&rsquo;exception de l&rsquo;Annexe 2 qui doit \u00eatre remplac\u00e9e par une description sommaire des mesures de s\u00e9curit\u00e9 dans les cas o\u00f9 la personne concern\u00e9e ne soit pas en mesure d&rsquo;obtenir une copie de l&rsquo;exportateur de donn\u00e9es&nbsp;;<\/p>\n\n\n\n<p>(h) qu&rsquo;en cas de sous-traitance, il a pr\u00e9alablement inform\u00e9 l&rsquo;exportateur de donn\u00e9es et obtenu son consentement \u00e9crit pr\u00e9alable&nbsp;;<\/p>\n\n\n\n<p>(i) que les services de traitement effectu\u00e9s par le sous-traitant ult\u00e9rieur seront effectu\u00e9s conform\u00e9ment \u00e0 la Clause 11&nbsp;;<\/p>\n\n\n\n<p>(j) d&rsquo;envoyer rapidement \u00e0 l&rsquo;exportateur de donn\u00e9es une copie de tout accord de sous-traitance secondaire qu&rsquo;il conclut en accord avec les Clauses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 6 &#8211; Responsabilit\u00e9<\/h2>\n\n\n\n<p>1. Les parties conviennent que toute personne concern\u00e9e, qui aurait subi des dommages r\u00e9sultant d&rsquo;une violation des obligations d\u00e9finies \u00e0 la Clause&nbsp;3 ou \u00e0 la Clause&nbsp;11 par une partie ou un sous-traitant ult\u00e9rieur, a le droit de recevoir une compensation de l&rsquo;exportateur de donn\u00e9es pour dommages subis.<\/p>\n\n\n\n<p>2. Si une personne concern\u00e9e n&rsquo;est pas en mesure de d\u00e9poser une demande d&rsquo;indemnisation conform\u00e9ment au paragraphe 1 \u00e0 l&rsquo;encontre de l&rsquo;exportateur de donn\u00e9es, en cas de violation par l&rsquo;importateur de donn\u00e9es ou son sous-traitant ult\u00e9rieur de l&rsquo;une de ses obligations d\u00e9finies \u00e0 la Clause&nbsp;3 ou \u00e0 la Clause&nbsp;11, parce que l&rsquo;exportateur de donn\u00e9es a disparu mat\u00e9riellement ou a cess\u00e9 d&rsquo;exister en droit ou est devenu insolvable, l&rsquo;importateur de donn\u00e9es accepte que la personne concern\u00e9e puisse d\u00e9poser une demande contre l&rsquo;importateur de donn\u00e9es comme s&rsquo;il s&rsquo;agissait de l&rsquo;exportateur de donn\u00e9es, \u00e0 moins qu&rsquo;une entit\u00e9 rempla\u00e7ante n&rsquo;ait assum\u00e9 l&rsquo;int\u00e9gralit\u00e9 des obligations juridiques de l&rsquo;exportateur de donn\u00e9es par contrat, par effet de la loi, auquel cas la personne concern\u00e9e peut faire valoir ses droits contre cette entit\u00e9.<\/p>\n\n\n\n<p>L&rsquo;importateur de donn\u00e9es ne saurait invoquer une violation de la part d&rsquo;un sous-traitant ult\u00e9rieur de ses obligations pour s&rsquo;exon\u00e9rer de ses propres responsabilit\u00e9s.<\/p>\n\n\n\n<p>2. Si une personne concern\u00e9e n&rsquo;est pas en mesure de d\u00e9poser une demande d&rsquo;indemnisation conform\u00e9ment au paragraphe 1 \u00e0 l&rsquo;\u00e9gard de l&rsquo;exportateur de donn\u00e9es, en cas de violation par l&rsquo;importateur de donn\u00e9es ou son sous-traitant ult\u00e9rieur de l&rsquo;une de ses obligations d\u00e9finies \u00e0 la Clause&nbsp;3 ou \u00e0 la Clause&nbsp;11, parce que l&rsquo;exportateur de donn\u00e9es a disparu mat\u00e9riellement ou a cess\u00e9 d&rsquo;exister en droit ou est devenu insolvable, l&rsquo;importateur de donn\u00e9es accepte que la personne concern\u00e9e puisse d\u00e9poser une demande contre l&rsquo;importateur de donn\u00e9es comme s&rsquo;il s&rsquo;agissait de l&rsquo;exportateur de donn\u00e9es, \u00e0 moins qu&rsquo;une entit\u00e9 rempla\u00e7ante n&rsquo;ait assum\u00e9 l&rsquo;int\u00e9gralit\u00e9 des obligations juridiques de l&rsquo;exportateur de donn\u00e9es par contrat, par effet de la loi, auquel cas la personne concern\u00e9e peut faire valoir ses droits \u00e0 l&rsquo;\u00e9gard de cette entit\u00e9. Cette responsabilit\u00e9 tierce du sous-traitant ult\u00e9rieur sera limit\u00e9e \u00e0 ses propres op\u00e9rations de traitement conform\u00e9ment aux clauses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 7 &#8211; M\u00e9diation et juridiction<\/h2>\n\n\n\n<p>1. L&rsquo;importateur de donn\u00e9es convient que si la personne concern\u00e9e invoque une compensation pour dommages en vertu des Clauses, l&rsquo;importateur de donn\u00e9es acceptera la d\u00e9cision de la personne concern\u00e9e :<\/p>\n\n\n\n<p>(a) de soumettre le litige \u00e0 la m\u00e9diation, par une personne ind\u00e9pendante ou, le cas \u00e9ch\u00e9ant, par l&rsquo;autorit\u00e9 de surveillance&nbsp;;<\/p>\n\n\n\n<p>(b) de signaler le litige aux tribunaux de l&rsquo;\u00c9tat membre dans lequel l&rsquo;exportateur de donn\u00e9es est \u00e9tabli.<\/p>\n\n\n\n<p>2. Les parties conviennent que le choix effectu\u00e9 par la personne concern\u00e9e ne portera pas pr\u00e9judice \u00e0 ses droits substantiels ou proc\u00e9duraux de demander des recours conform\u00e9ment \u00e0 d&rsquo;autres dispositions du droit national ou international.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 8 &#8211; Coop\u00e9ration avec les autorit\u00e9s de contr\u00f4le<\/h2>\n\n\n\n<p>1. L&rsquo;exportateur de donn\u00e9es s&rsquo;engage \u00e0 d\u00e9poser une copie du pr\u00e9sent contrat aupr\u00e8s de l&rsquo;autorit\u00e9 de contr\u00f4le si celle-ci en fait la demande ou si ce d\u00e9p\u00f4t est exig\u00e9 par la loi applicable en mati\u00e8re de protection des donn\u00e9es.<\/p>\n\n\n\n<p>2. Les parties conviennent que l&rsquo;autorit\u00e9 de contr\u00f4le a le droit de proc\u00e9der \u00e0 un audit de l&rsquo;importateur de donn\u00e9es, et de tout sous-traitant ult\u00e9rieur, qui ait le m\u00eame champ d&rsquo;application et est soit aux m\u00eames conditions que celles qui s&rsquo;appliqueraient \u00e0 un audit de l&rsquo;exportateur de donn\u00e9es en vertu de la loi applicable sur la protection des donn\u00e9es.<\/p>\n\n\n\n<p>3. L&rsquo;importateur de donn\u00e9es devra notifier sans d\u00e9lai l&rsquo;exportateur de donn\u00e9es de l&rsquo;existence d&rsquo;une l\u00e9gislation applicable \u00e0 lui-m\u00eame ou \u00e0 tout sous-traitant ult\u00e9rieur emp\u00eachant la r\u00e9alisation d&rsquo;un audit de l&rsquo;importateur de donn\u00e9es, ou de tout sous-traitant ult\u00e9rieur, conform\u00e9ment au paragraphe 2. Dans ce cas, l&rsquo;exportateur de donn\u00e9es est autoris\u00e9 \u00e0 prendre les mesures pr\u00e9vues \u00e0 la Clause 5 (b).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 9 &#8211; Loi applicable<\/h2>\n\n\n\n<p>Les Clauses seront r\u00e9gies par le droit de l&rsquo;\u00c9tat membre dans lequel l&rsquo;exportateur de donn\u00e9es est \u00e9tabli.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 10 &#8211; Variation du contrat<\/h2>\n\n\n\n<p>Les parties s&rsquo;engagent \u00e0 ne pas modifier les Clauses. Cela n&#8217;emp\u00eache pas les parties d&rsquo;ajouter des clauses concernant des questions li\u00e9es \u00e0 l&rsquo;entreprise, si n\u00e9cessaire, tant qu&rsquo;elles ne contredisent pas la Clause.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 11 &#8211; Sous-traitance<\/h2>\n\n\n\n<p>1. L&rsquo;importateur de donn\u00e9es ne devra sous-traiter aucune de ses op\u00e9rations de traitement effectu\u00e9es pour le compte de l&rsquo;exportateur de donn\u00e9es en vertu des Clauses sans le consentement \u00e9crit pr\u00e9alable de l&rsquo;exportateur de donn\u00e9es. Lorsque l&rsquo;importateur de donn\u00e9es sous-traitera ses obligations aux termes des Clauses, avec le consentement de l&rsquo;exportateur de donn\u00e9es, il ne le fera que par le biais d&rsquo;un accord \u00e9crit avec le sous-traitant ult\u00e9rieur qui impose au sous-traitant ult\u00e9rieur les m\u00eames obligations que celles impos\u00e9es \u00e0 l&rsquo;importateur de donn\u00e9es en vertu des Clauses. L\u00e0 o\u00f9 le sous-traitant ne parvient pas \u00e0 remplir<\/p>\n\n\n\n<p>ses obligations en mati\u00e8re de protection des donn\u00e9es en conformit\u00e9 avec un tel accord \u00e9crit, l&rsquo;importateur de donn\u00e9es restera pleinement responsable envers l&rsquo;exportateur de donn\u00e9es de l&rsquo;ex\u00e9cution des obligations du sous-traitant ult\u00e9rieur en vertu dudit accord.<\/p>\n\n\n\n<p>2. Le contrat \u00e9crit pr\u00e9alablement entre l&rsquo;importateur de donn\u00e9es et le sous-traitant ult\u00e9rieur pr\u00e9voit \u00e9galement une clause de tiers b\u00e9n\u00e9ficiaire telle que pr\u00e9vue \u00e0 la clause 3 pour les cas o\u00f9 la personne concern\u00e9e ne soit pas en mesure d&rsquo;introduire la demande d&rsquo;indemnisation mentionn\u00e9e \u00e0 la Clause 6, paragraphe 1, \u00e0 l&rsquo;encontre de l&rsquo;exportateur de donn\u00e9es ou de l&rsquo;importateur de donn\u00e9es parce qu&rsquo;ils ont disparu mat\u00e9riellement ou ont cess\u00e9 d&rsquo;exister en droit ou sont devenus insolvables et qu&rsquo;aucune entit\u00e9 rempla\u00e7ante n&rsquo;a assum\u00e9 l&rsquo;ensemble des obligations l\u00e9gales de l&rsquo;exportateur de donn\u00e9es ou de l&rsquo;importateur de donn\u00e9es par contrat ou de plein droit. Cette responsabilit\u00e9 tierce du sous-traitant ult\u00e9rieur sera limit\u00e9e \u00e0 ses propres op\u00e9rations de traitement en vertu des clauses.<\/p>\n\n\n\n<p>3. Les dispositions relatives aux aspects de la protection des donn\u00e9es pour la sous-traitance du contrat mentionn\u00e9 au paragraphe 1 sont r\u00e9gies par le droit de l&rsquo;\u00c9tat membre dans lequel l&rsquo;exportateur de donn\u00e9es est \u00e9tabli.<\/p>\n\n\n\n<p>4. L&rsquo;exportateur de donn\u00e9es devra \u00e9tablir une liste des accords de sous-traitance secondaire conclus sous les Clauses et notifi\u00e9s par l&rsquo;importateur de donn\u00e9es conform\u00e9ment \u00e0 la Clause 5&nbsp;(j), qui sera mise \u00e0 jour au moins une fois par an. La liste devra \u00eatre accessible \u00e0 l&rsquo;autorit\u00e9 de contr\u00f4le de la protection des donn\u00e9es de l&rsquo;exportateur de donn\u00e9es.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 12 &#8211; Obligation apr\u00e8s la r\u00e9siliation des services de traitement des donn\u00e9es personnelles<\/h2>\n\n\n\n<p>1. Les parties conviennent qu&rsquo;\u00e0 la fin de la prestation de services de traitement des donn\u00e9es, l&rsquo;importateur de donn\u00e9es et le sous-traitant ult\u00e9rieur doivent, au choix de l&rsquo;exportateur de donn\u00e9es, renvoyer toutes les donn\u00e9es personnelles transf\u00e9r\u00e9es et leurs copies \u00e0 l&rsquo;exportateur de donn\u00e9es ou d\u00e9truire toutes les donn\u00e9es personnelles et certifier \u00e0 l&rsquo;exportateur de donn\u00e9es qu&rsquo;elles l&rsquo;ont fait, sauf si la l\u00e9gislation impos\u00e9e \u00e0 l&rsquo;importateur de donn\u00e9es l&#8217;emp\u00eache de renvoyer ou de d\u00e9truire tout ou partie des donn\u00e9es personnelles transf\u00e9r\u00e9es. Dans ce cas, l&rsquo;importateur de donn\u00e9es garantira la confidentialit\u00e9 des donn\u00e9es \u00e0 caract\u00e8re personnel transf\u00e9r\u00e9es et ne traitera plus activement les donn\u00e9es personnelles transf\u00e9r\u00e9es.<\/p>\n\n\n\n<p>2. L&rsquo;importateur de donn\u00e9es et le sous-traitant ult\u00e9rieur garantissent que, \u00e0 la demande de l&rsquo;exportateur de donn\u00e9es et\/ou de l&rsquo;autorit\u00e9 de contr\u00f4le, ils soumettront leurs installations de traitement des donn\u00e9es \u00e0 un audit des mesures en vertu du paragraphe 1.<\/p>\n\n\n\n<p><strong>ANNEXE A: AUTRES DISPOSITIONS<\/strong><\/p>\n\n\n\n<p><strong>A. R\u00e8glement g\u00e9n\u00e9ral sur la protection des donn\u00e9es<\/strong>&nbsp;: Dans la totalit\u00e9 des clauses pr\u00e9sentes, les r\u00e9f\u00e9rences \u00e0 la directive 95\/46\/CE doivent \u00eatre lues comme des r\u00e9f\u00e9rences au R\u00e8glement g\u00e9n\u00e9ral sur la protection des donn\u00e9es (2016\/679) (le \u00ab<strong>&nbsp;R\u00e8glement<\/strong>&nbsp;\u00bb), ou, si l&rsquo;exportateur de donn\u00e9es est \u00e9tabli au Royaume-Uni (le&nbsp;\u00ab<strong>&nbsp;Royaume-Uni<\/strong>&nbsp;\u00bb), au R\u00e8glement et\/ou \u00e0 toute loi locale britannique qui met en application ou compl\u00e8te le R\u00e8glement, tel qu&rsquo;applicable de temps \u00e0 autre, et dans chaque cas, les r\u00e9f\u00e9rences \u00e0 des articles ou des dispositions sp\u00e9cifiques de la directive doivent \u00eatre lues comme des r\u00e9f\u00e9rences \u00e0 l&rsquo;article ou disposition \u00e9quivalente dans le R\u00e8glement ou la loi locale britannique, lorsque cela est possible et appropri\u00e9.<\/p>\n\n\n\n<p><strong>B. Sous-traitance ult\u00e9rieure<\/strong>&nbsp;: Aux fins de la Clause 11 des pr\u00e9sentes clauses, l&rsquo;exportateur de donn\u00e9es consent par la pr\u00e9sente \u00e0 ce que l&rsquo;importateur de donn\u00e9es sous-traite tout ou partie de ses op\u00e9rations de traitement de donn\u00e9es effectu\u00e9es en vertu des pr\u00e9sentes clauses conform\u00e9ment au DPA.<\/p>\n\n\n\n<p><strong>C. Importateurs de donn\u00e9es \u00e9tablis dans des pays \u00ab&nbsp;ad\u00e9quats&nbsp;\u00bb<\/strong>&nbsp;: dans la mesure o\u00f9 monday.com Ltd. est le destinataire et le sous-traitant des donn\u00e9es \u00e0 caract\u00e8re personnel conform\u00e9ment aux pr\u00e9sentes Clauses et soit&nbsp;:<\/p>\n\n\n\n<p>(i) \u00e9tabli dans une juridiction reconnue par la Commission europ\u00e9enne (ou, si l&rsquo;exportateur de donn\u00e9es est \u00e9tabli au Royaume-Uni, reconnue par les autorit\u00e9s comp\u00e9tentes du Royaume-Uni) comme assurant un niveau de protection ad\u00e9quat des donn\u00e9es \u00e0 caract\u00e8re personnel, les conditions du DPA concernant les transferts de donn\u00e9es personnelles vers d&rsquo;autres pays s&rsquo;appliquent, de sorte que les pr\u00e9sentes clauses s&rsquo;appliquent uniquement au transfert ult\u00e9rieur des donn\u00e9es import\u00e9es vers les sous-traitants de monday.com Ltd. qui sont situ\u00e9s dans une juridiction non reconnue par la Commission europ\u00e9enne comme assurant un niveau de protection ad\u00e9quat des donn\u00e9es personnelles ou<\/p>\n\n\n\n<p>(ii) \u00e9tabli dans une juridiction non reconnue par la Commission europ\u00e9enne comme assurant un niveau de protection ad\u00e9quat des donn\u00e9es personnelles, monday.com Ltd. sera l&rsquo;importateur de donn\u00e9es aux fins des pr\u00e9sentes Clauses.<\/p>\n\n\n\n<p><strong>D. Exportateurs de donn\u00e9es \u00e9tablis en dehors de l&rsquo;Espace \u00e9conomique europ\u00e9en<\/strong>&nbsp;: dans la mesure o\u00f9 l&rsquo;exportateur de donn\u00e9es conform\u00e9ment aux pr\u00e9sentes clauses est \u00e9tabli dans une juridiction situ\u00e9e en dehors de l&rsquo;Espace \u00e9conomique europ\u00e9en, les pr\u00e9sentes clauses s&rsquo;appliquent uniquement aux transferts de donn\u00e9es personnelles concernant des personnes r\u00e9sidant \u00e0 l&rsquo;int\u00e9rieur de l&rsquo;Espace \u00e9conomique europ\u00e9en. Dans ce cas, les r\u00e9f\u00e9rences \u00e0 \u00ab&nbsp;l&rsquo;\u00c9tat membre&nbsp;\u00bb doivent \u00eatre lues comme des r\u00e9f\u00e9rences \u00e0 l&rsquo;\u00c9tat membre applicable relativement aux activit\u00e9s de traitement de l&rsquo;exportateur de donn\u00e9es en relation avec les pr\u00e9sentes clauses qui concernent les donn\u00e9es personnelles de personnes r\u00e9sidant dans l&rsquo;Espace \u00e9conomique europ\u00e9en.<\/p>\n\n\n\n<p><strong>E. Instructions<\/strong>&nbsp;: Aux fins de la Clause 5(a) des Clauses contractuelles standard, le traitement d\u00e9crit dans le DPA et tout autre document \u00e9crit convenu mutuellement par l&rsquo;exportateur de donn\u00e9es et l&rsquo;importateur de donn\u00e9es constituent les instructions de l&rsquo;exportateur de donn\u00e9es \u00e0 l&rsquo;importateur de donn\u00e9es au moment de la conclusion du DPA et\/ou dudit document \u00e9crit, pour traiter les donn\u00e9es personnelles au nom de l&rsquo;exportateur de donn\u00e9es. Toute instruction suppl\u00e9mentaire ou alternative sera soumise aux conditions du DPA.<\/p>\n\n\n\n<p><strong>F. Suspension des transferts de donn\u00e9es et de la r\u00e9siliation<\/strong>&nbsp;: si, conform\u00e9ment \u00e0 la Clause 5(a), l&rsquo;exportateur de donn\u00e9es a l&rsquo;intention de suspendre le transfert de donn\u00e9es personnelles et\/ou de r\u00e9silier ces Clauses, il devra notifier l&rsquo;importateur de donn\u00e9es et fournir \u00e0 l&rsquo;importateur de donn\u00e9es 30 jours pour rem\u00e9dier \u00e0 la non-conformit\u00e9 (\u00ab&nbsp;<strong>P\u00e9riode de rem\u00e8de<\/strong>&nbsp;\u00bb). Si, apr\u00e8s la P\u00e9riode de rem\u00e8de, l&rsquo;importateur de donn\u00e9es n&rsquo;a pas ou ne peut pas rem\u00e9dier \u00e0 la non-conformit\u00e9, l&rsquo;exportateur de donn\u00e9es peut suspendre ou r\u00e9silier le<\/p>\n\n\n\n<p>transfert de donn\u00e9es personnelles imm\u00e9diatement. L&rsquo;exportateur de donn\u00e9es ne doit pas \u00eatre tenu de fournir cet notification dans les cas o\u00f9 il consid\u00e8re qu&rsquo;il existe un risque important de pr\u00e9judice pour les personnes concern\u00e9es ou leurs donn\u00e9es personnelles. Nonobstant toute autre disposition de la pr\u00e9sente section F, dans le cas o\u00f9 les pr\u00e9sentes clauses cessent de constituer une garantie appropri\u00e9e du transfert des donn\u00e9es personnelles conform\u00e9ment \u00e0 la l\u00e9gislation applicable en mati\u00e8re de protection des donn\u00e9es en vertu d&rsquo;une d\u00e9cision contraignante d&rsquo;une autorit\u00e9 de contr\u00f4le comp\u00e9tente, les dispositions de l&rsquo;APD concernant les modifications n\u00e9cessaires en raison de changements l\u00e9gislatifs et r\u00e9glementaires s&rsquo;appliquent.<\/p>\n\n\n\n<p><strong>G. Assistance de l&rsquo;importateur de donn\u00e9es<\/strong>&nbsp;: dans le cas o\u00f9 l&rsquo;exportateur de donn\u00e9es cherche \u00e0 effectuer une \u00e9valuation de l&rsquo;ad\u00e9quation de ces Clauses pour la protection des donn\u00e9es personnelles transf\u00e9r\u00e9es, l&rsquo;importateur de donn\u00e9es est tenu de fournir une assistance raisonnable \u00e0 l&rsquo;exportateur de donn\u00e9es aux fins de cette \u00e9valuation.<\/p>\n\n\n\n<p><strong>H. Droits d&rsquo;audit<\/strong>&nbsp;: l&rsquo;exportateur de donn\u00e9es reconna\u00eet et accepte qu&rsquo;il exerce son droit d&rsquo;audit sous la Clause 5(f) et la Clause 12.2 en demandant \u00e0 l&rsquo;importateur de donn\u00e9es de se conformer aux mesures d&rsquo;audit d\u00e9crites dans le DPA.<\/p>\n\n\n\n<p><strong>I. Transferts \u00e0 partir de la Suisse<\/strong>&nbsp;: Nonobstant la section D ci-dessus, en ce qui concerne les transferts de donn\u00e9es \u00e0 partir d&rsquo;un exportateur de donn\u00e9es \u00e9tabli en Suisse, les pr\u00e9sentes Clauses seront interpr\u00e9t\u00e9es conform\u00e9ment au droit applicable en Suisse. Dans ce cas, les r\u00e9f\u00e9rences \u00e0 la directive 95\/46\/CE dans la totalit\u00e9 des clauses pr\u00e9sentes doivent \u00eatre lues comme des r\u00e9f\u00e9rences \u00e0 la l\u00e9gislation suisse pertinente concernant la protection des donn\u00e9es, la vie priv\u00e9e, la s\u00e9curit\u00e9 des donn\u00e9es ou le traitement des informations sur les personnes, applicable \u00e0 l&rsquo;exportateur de donn\u00e9es, et les termes d\u00e9finis \u00e0 la clause 1 doivent avoir la signification qui leur est donn\u00e9e (ou des termes raisonnablement \u00e9quivalents) dans cette l\u00e9gislation. Les r\u00e9f\u00e9rences \u00e0 \u00ab \u00c9tat membre \u00bb doivent \u00eatre lues comme des r\u00e9f\u00e9rences \u00e0 la Suisse. Sans pr\u00e9judice de la section A ci-dessus, les parties conviennent en outre que, en ce qui concerne les transferts de donn\u00e9es pour lesquels, en vertu des lois applicables sur la protection de la vie priv\u00e9e, la d\u00e9finition des \u00ab donn\u00e9es personnelles \u00bb (ou un terme raisonnablement \u00e9quivalent) s&rsquo;\u00e9tend aux informations relatives aux personnes morales, les r\u00e9f\u00e9rences aux \u00ab donn\u00e9es personnelles \u00bb dans les pr\u00e9sentes clauses doivent \u00e9galement inclure les informations relatives aux personnes morales. Les parties conviennent en outre que, lorsque la loi applicable l&rsquo;exige ou \u00e0 la demande de l&rsquo;autorit\u00e9 de surveillance comp\u00e9tente, elles accompliront tous les actes suppl\u00e9mentaires qui peuvent raisonnablement \u00eatre requis pour donner effet \u00e0 la pr\u00e9sente section H, y compris (mais sans s&rsquo;y limiter) l&rsquo;ex\u00e9cution de tous les documents.<\/p>\n\n\n\n<p><strong>ANNEXE 1<\/strong><\/p>\n\n\n\n<p><strong>des Clauses contractuelles types<\/strong><\/p>\n\n\n\n<p><strong>Exportateur de donn\u00e9es<\/strong><\/p>\n\n\n\n<p>L&rsquo;exportateur de donn\u00e9es est l&rsquo;entit\u00e9 identifi\u00e9e comme \u00ab&nbsp;Client&nbsp;\u00bb ou \u00ab&nbsp;Responsable du traitement&nbsp;\u00bb dans le DPA. <strong>&nbsp;Importateur de donn\u00e9es<\/strong><\/p>\n\n\n\n<p>L&rsquo;importateur de donn\u00e9es est monday.com Ltd., un fournisseur de services web et\/ou son sous-traitant ult\u00e9rieur (selon le terme utilis\u00e9 dans le DPA), tel que d\u00e9termin\u00e9 par monday.com Ltd. conform\u00e9ment aux conditions du DPA concernant les transferts de donn\u00e9es transfrontaliers.<\/p>\n\n\n\n<p><strong>Donn\u00e9es concern\u00e9es<\/strong><\/p>\n\n\n\n<p>Les donn\u00e9es personnelles transf\u00e9r\u00e9es concernent les cat\u00e9gories de personnes concern\u00e9es d\u00e9finies dans le DPA. <strong>&nbsp;Cat\u00e9gories des donn\u00e9es<\/strong><\/p>\n\n\n\n<p>Les donn\u00e9es personnelles transf\u00e9r\u00e9es concernent les cat\u00e9gories de donn\u00e9es d\u00e9finies dans le DPA. <strong>&nbsp;Op\u00e9rations de traitement<\/strong><\/p>\n\n\n\n<p>Les donn\u00e9es personnelles transf\u00e9r\u00e9es seront soumises aux activit\u00e9s de traitement de base d\u00e9finies \u00e0 l&rsquo;annexe 1 du DPA.<\/p>\n\n\n\n<p><strong>ANNEXE 2<\/strong><\/p>\n\n\n\n<p><strong>des Clauses contractuelles types<\/strong><\/p>\n\n\n\n<p><strong>Description des mesures techniques et organisationnelles de s\u00e9curit\u00e9 appliqu\u00e9es par l&rsquo;importateur de donn\u00e9es conform\u00e9ment \u00e0 la Clause 4(d) et \u00e0 la Clause 5(c) (ou document\/l\u00e9gislation joint)&nbsp;:<\/strong><\/p>\n\n\n\n<p>Les mesures techniques et organisationnelles de s\u00e9curit\u00e9 appliqu\u00e9es par l&rsquo;importateur de donn\u00e9es sont celles d\u00e9crites dans le DPA.<\/p>\n\n\n\n<p>AVERTISSEMENT&nbsp;: Cette version est une traduction de l&rsquo;original en anglais et est fournie uniquement \u00e0 des fins de commodit\u00e9. L&rsquo;original anglais est la version officielle et juridiquement contraignante et c&rsquo;est elle qui pr\u00e9vaudra en cas de divergence.<\/p>\n\n\n\n<p><a href=\"https:\/\/na3.docusign.net\/Member\/PowerFormSigning.aspx?PowerFormId=176ad33c-8ca7-46b3-9346-6025450622b9&amp;env=na3&amp;acct=2b5df10d-1b22-4e99-a6c2-f88dc659b4f6&amp;v=2\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Sign the Online Version<\/strong><\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The data exporter and the data importer, as defined under the <a href=\"https:\/\/monday.com\/l\/fr\/confidentialite\/dpa\/\">monday.com Data Processing \u00a0Addendum<\/a> or other agreement or addendum effectively governing the processing of personal\u00a0 data by the data importer on behalf of the data exporter, including all annexes, exhibits and\u00a0 appendices thereto (\u201c<strong>DPA<\/strong>\u201d), each a \u00ab\u00a0<strong>party<\/strong>\u00ab\u00a0; together the \u00ab\u00a0<strong>parties<\/strong>\u00ab\u00a0, have agreed on the following\u00a0 Contractual Clauses (\u00ab\u00a0<strong>Clauses<\/strong>\u00ab\u00a0) in order to adduce adequate safeguards with respect to the\u00a0 protection of privacy and fundamental rights and freedoms of individuals for the transfer by the\u00a0 data exporter to the data importer of the personal data specified in Appendix 1.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 1 &#8211; Definitions<\/h2>\n\n\n\n<p>For the purposes of the Clauses:<\/p>\n\n\n\n<p>(a) &lsquo;personal data&rsquo;, &lsquo;special categories of data&rsquo;, &lsquo;process\/processing&rsquo;, &lsquo;controller&rsquo;, &lsquo;processor&rsquo;,&nbsp; &lsquo;data subject&rsquo; and &lsquo;supervisory authority&rsquo; shall have the same meaning as in Directive&nbsp; 95\/46\/EC of the European Parliament and of the Council of 24 October 1995 on the&nbsp; protection of individuals with regard to the processing of personal data and on the free&nbsp; movement of such data;<\/p>\n\n\n\n<p>(b) &lsquo;the data exporter&rsquo; means the controller who transfers the personal data;<\/p>\n\n\n\n<p>(c) &lsquo;the data importer&rsquo; means the processor who agrees to receive from the data exporter&nbsp; personal data intended for processing on his behalf after the transfer in accordance with&nbsp; his instructions and the terms of the Clauses and who is not subject to a third country&rsquo;s&nbsp; system ensuring adequate protection within the meaning of Article 25(1) of&nbsp; Directive 95\/46\/EC;<\/p>\n\n\n\n<p>(d) &lsquo;the subprocessor&rsquo; means any processor engaged by the data importer or by any other&nbsp; subprocessor of the data importer who agrees to receive from the data importer or from&nbsp; any other subprocessor of the data importer personal data exclusively intended for&nbsp; processing activities to be carried out on behalf of the data exporter after the transfer in&nbsp; accordance with his instructions, the terms of the Clauses and the terms of the written&nbsp; subcontract;<\/p>\n\n\n\n<p>(e) &lsquo;the applicable data protection law<strong>&lsquo; <\/strong>means the legislation protecting the fundamental rights&nbsp; and freedoms of individuals and, in particular, their right to privacy with respect to the&nbsp; processing of personal data applicable to a data controller in the Member State in which&nbsp; the data exporter is established;<\/p>\n\n\n\n<p>(f) &lsquo;technical and organisational security measures&rsquo; means those measures aimed at&nbsp; protecting personal data against accidental or unlawful destruction or accidental loss,&nbsp; alteration, unauthorised disclosure or access, in particular where the processing involves&nbsp; the transmission of data over a network, and against all other unlawful forms of&nbsp; processing.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 2 &#8211; Details of the transfer<\/h2>\n\n\n\n<p>The details of the transfer and in particular the special categories of personal data where applicable &nbsp;are specified in Appendix 1 which forms an integral part of the Clauses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 3 &#8211; Third-party beneficiary clause<\/h2>\n\n\n\n<p>1. The data subject can enforce against the data exporter this Clause, Clause 4(b) to (i),&nbsp; Clause 5(a) to (e), and (g) to (j), Clause 6(1) and (2), Clause 7, Clause 8(2), and Clauses&nbsp; 9 to 12 as third-party beneficiary.&nbsp;<\/p>\n\n\n\n<p>2. The data subject can enforce against the data importer this Clause, Clause 5(a) to (e)&nbsp; and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where the data&nbsp; exporter has factually disappeared or has ceased to exist in law unless any successor entity&nbsp; has assumed the entire legal obligations of the data exporter by contract or by operation of&nbsp; law, as a result of which it takes on the rights and obligations of the data exporter, in which&nbsp; case the data subject can enforce them against such entity.&nbsp;<\/p>\n\n\n\n<p>3. The data subject can enforce against the subprocessor this Clause, Clause 5(a) to (e)&nbsp; and (g), Clause 6, Clause 7, Clause 8(2), and Clauses 9 to 12, in cases where both the&nbsp; data exporter and the data importer have factually disappeared or ceased to exist in law or&nbsp; have become insolvent, unless any successor entity has assumed the entire legal&nbsp; obligations of the data exporter by contract or by operation of law as a result of which it&nbsp; takes on the rights and obligations of the data exporter, in which case the data subject can&nbsp; enforce them against such entity. Such third-party liability of the subprocessor shall be&nbsp; limited to its own processing operations under the Clauses.&nbsp;<\/p>\n\n\n\n<p>4. The parties do not object to a data subject being represented by an association or other&nbsp; body if the data subject so expressly wishes and if permitted by national law.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Clause 4 &#8211; Obligations of the data exporter<\/h2>\n\n\n\n<p>The data exporter agrees and warrants:&nbsp;<\/p>\n\n\n\n<p>(a) that the processing, including the transfer itself, of the personal data has been and will&nbsp; continue to be carried out in accordance with the relevant provisions of the applicable data&nbsp; protection law (and, where applicable, has been notified to the relevant authorities of the&nbsp; Member State where the data exporter is established) and does not violate the relevant&nbsp; provisions of that State;<\/p>\n\n\n\n<p>(b) that it has instructed and throughout the duration of the personal data processing&nbsp; services will instruct the data importer to process the personal data transferred only on&nbsp; the data exporter&rsquo;s behalf and in accordance with the applicable data protection law and&nbsp; the Clauses;<\/p>\n\n\n\n<p>(c) that the data importer will provide sufficient guarantees in respect of the technical and&nbsp; organisational security measures specified in Appendix 2 to this contract;<\/p>\n\n\n\n<p>(d) that after assessment of the requirements of the applicable data protection law, the&nbsp; security measures are appropriate to protect personal data against accidental or unlawful&nbsp; destruction or accidental loss, alteration, unauthorised disclosure or access, in particular&nbsp; where the processing involves the transmission of data over a network, and against all other&nbsp; unlawful forms of processing, and that these measures ensure a level of security&nbsp; appropriate to the risks presented by the processing and the nature of the data to be&nbsp; protected having regard to the state of the art and the cost of their implementation;<\/p>\n\n\n\n<p>(e) that it will ensure compliance with the security measures;<\/p>\n\n\n\n<p>(f) that, if the transfer involves special categories of data, the data subject has been informed&nbsp; or will be informed before, or as soon as possible after, the transfer that its data could be&nbsp; transmitted to a third country not providing adequate protection within the meaning of&nbsp; Directive 95\/46\/EC;<\/p>\n\n\n\n<p>(g) to forward any notification received from the data importer or any subprocessor pursuant&nbsp; to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data&nbsp; exporter decides to continue the transfer or to lift the suspension;<\/p>\n\n\n\n<p>(h) to make available to the data subjects upon request a copy of the Clauses, with the&nbsp; exception of Appendix 2, and a summary description of the security measures, as well&nbsp; as a copy of any contract for subprocessing services which has to be made in&nbsp; accordance with the Clauses, unless the Clauses or the contract contain commercial&nbsp; information, in which case it may remove such commercial information;<\/p>\n\n\n\n<p>(i) that, in the event of subprocessing, the processing activity is carried out in accordance&nbsp; with Clause 11 by a subprocessor providing at least the same level of protection for the&nbsp; personal data and the rights of data subject as the data importer under the Clauses; and<\/p>\n\n\n\n<p>(j) that it will ensure compliance with Clause 4(a) to (i).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 5 &#8211; Obligations of the data importer<\/strong><\/h2>\n\n\n\n<p>The data importer agrees and warrants:<\/p>\n\n\n\n<p>(a) to process the personal data only on behalf of the data exporter and in compliance with its&nbsp; instructions and the Clauses; if it cannot provide such compliance for whatever reasons,&nbsp; it agrees to inform promptly the data exporter of its inability to comply, in which case the&nbsp; data exporter is entitled to suspend the transfer of data and\/or terminate the contract;<\/p>\n\n\n\n<p>(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling&nbsp; the instructions received from the data exporter and its obligations under the contract and&nbsp; that in the event of a change in this legislation which is likely to have a substantial adverse&nbsp; effect on the warranties and obligations provided by the Clauses, it will promptly notify the&nbsp; change to the data exporter as soon as it is aware, in which case the data exporter is&nbsp; entitled to suspend the transfer of data and\/or terminate the contract;<\/p>\n\n\n\n<p>(c) that it has implemented the technical and organisational security measures specified in&nbsp; Appendix 2 before processing the personal data transferred;<\/p>\n\n\n\n<p>(d) that it will promptly notify the data exporter about:<\/p>\n\n\n\n<p>(i) any legally binding request for disclosure of the personal data by a law enforcement&nbsp; authority unless otherwise prohibited, such as a prohibition under criminal law to&nbsp; preserve the confidentiality of a law enforcement investigation,<\/p>\n\n\n\n<p>(ii) any accidental or unauthorised access, and<\/p>\n\n\n\n<p>(iii) any request received directly from the data subjects without responding to that&nbsp; request, unless it has been otherwise authorised to do so;<\/p>\n\n\n\n<p>(e) to deal promptly and properly with all inquiries from the data exporter relating to its&nbsp; processing of the personal data subject to the transfer and to abide by the advice of the&nbsp; supervisory authority with regard to the processing of the data transferred;<\/p>\n\n\n\n<p>(f) at the request of the data exporter to submit its data processing facilities for audit of the&nbsp; processing activities covered by the Clauses which shall be carried out by the data exporter&nbsp; or an inspection body composed of independent members and in possession of the&nbsp; required professional qualifications bound by a duty of confidentiality, selected by the data&nbsp; exporter, where applicable, in agreement with the supervisory authority;<\/p>\n\n\n\n<p>(g) to make available to the data subject upon request a copy of the Clauses, or any existing&nbsp; contract for subprocessing, unless the Clauses or contract contain commercial&nbsp; information, in which case it may remove such commercial information, with the exception&nbsp; of Appendix 2 which shall be replaced by a summary description of the security measures&nbsp; in those cases where the data subject is unable to obtain a copy from the data exporter;<\/p>\n\n\n\n<p>(h) that, in the event of subprocessing, it has previously informed the data exporter and&nbsp; obtained its prior written consent;<\/p>\n\n\n\n<p>(i) that the processing services by the subprocessor will be carried out in accordance with&nbsp; Clause 11;<\/p>\n\n\n\n<p>(j) to send promptly a copy of any subprocessor agreement it concludes under the Clauses&nbsp; to the data exporter.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 6 &#8211; Liability<\/strong><\/h2>\n\n\n\n<p>1. The parties agree that any data subject, who has suffered damage as a result of any breach&nbsp; of the obligations referred to in Clause 3 or in Clause 11 by any party or subprocessor is&nbsp; entitled to receive compensation from the data exporter for the damage suffered.<\/p>\n\n\n\n<p>2. If a data subject is not able to bring a claim for compensation in accordance with paragraph&nbsp; 1 against the data exporter, arising out of a breach by the data importer or his subprocessor&nbsp; of any of their obligations referred to in Clause 3 or in Clause 11, because the data exporter&nbsp; has factually disappeared or ceased to exist in law or has become insolvent, the data&nbsp; importer agrees that the data subject may issue a claim against the data importer as if it&nbsp; were the data exporter, unless any successor entity has assumed the entire legal&nbsp; obligations of the data exporter by contract of by operation of law, in which case the data&nbsp; subject can enforce its rights against such entity.<\/p>\n\n\n\n<p>The data importer may not rely on a breach by a subprocessor of its obligations in order&nbsp; to avoid its own liabilities.<\/p>\n\n\n\n<p>3. If a data subject is not able to bring a claim against the data exporter or the data importer&nbsp; referred to in paragraphs 1 and 2, arising out of a breach by the subprocessor of any of&nbsp; their obligations referred to in Clause 3 or in Clause 11 because both the data exporter&nbsp; and the data importer have factually disappeared or ceased to exist in law or have become&nbsp; insolvent, the subprocessor agrees that the data subject may issue a claim against the data&nbsp; subprocessor with regard to its own processing operations under the Clauses as if it were&nbsp; the data exporter or the data importer, unless any successor entity has assumed the entire&nbsp; legal obligations of the data exporter or data importer by contract or by operation of law, in&nbsp; which case the data subject can enforce its rights against such entity. The liability of the&nbsp; subprocessor shall be limited to its own processing operations under the Clauses.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 7 &#8211; Mediation and jurisdiction<\/strong><\/h2>\n\n\n\n<p>1. The data importer agrees that if the data subject invokes against it third-party beneficiary&nbsp; rights and\/or claims compensation for damages under the Clauses, the data importer will&nbsp; accept the decision of the data subject:<\/p>\n\n\n\n<p>(a) to refer the dispute to mediation, by an independent person or, where applicable,&nbsp; by the supervisory authority;<\/p>\n\n\n\n<p>(b) to refer the dispute to the courts in the Member State in which the data exporter is&nbsp; established.<\/p>\n\n\n\n<p>2. The parties agree that the choice made by the data subject will not prejudice its substantive&nbsp; or procedural rights to seek remedies in accordance with other provisions of national or&nbsp; international law.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 8 &#8211; Cooperation with supervisory authorities&nbsp;<\/strong><\/h2>\n\n\n\n<p>1. The data exporter agrees to deposit a copy of this contract with the supervisory authority&nbsp; if it so requests or if such deposit is required under the applicable data protection law.<\/p>\n\n\n\n<p>2. The parties agree that the supervisory authority has the right to conduct an audit of the data&nbsp; importer, and of any subprocessor, which has the same scope and is subject to the same&nbsp; conditions as would apply to an audit of the data exporter under the applicable data&nbsp; protection law.<\/p>\n\n\n\n<p>3. The data importer shall promptly inform the data exporter about the existence of&nbsp; legislation applicable to it or any subprocessor preventing the conduct of an audit of the&nbsp; data importer, or any subprocessor, pursuant to paragraph 2. In such a case the data&nbsp; exporter shall be entitled to take the measures foreseen in Clause 5 (b).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 9 &#8211; Governing Law<\/strong><\/h2>\n\n\n\n<p>The Clauses shall be governed by the law of the Member State in which the data exporter is&nbsp; established.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 10 &#8211; Variation of the contract<\/strong><\/h2>\n\n\n\n<p>The parties undertake not to vary or modify the Clauses. This does not preclude the parties from&nbsp; adding clauses on business related issues where required as long as they do not contradict the&nbsp; Clause.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 11 &#8211; Subprocessing<\/strong><\/h2>\n\n\n\n<p>1. The data importer shall not subcontract any of its processing operations performed on&nbsp; behalf of the data exporter under the Clauses without the prior written consent of the&nbsp; data exporter. Where the data importer subcontracts its obligations under the Clauses,&nbsp; with the consent of the data exporter, it shall do so only by way of a written agreement&nbsp; with the subprocessor which imposes the same obligations on the subprocessor as are&nbsp; imposed on the data importer under the Clauses. Where the subprocessor fails to fulfil<\/p>\n\n\n\n<p>its data protection obligations under such written agreement the data importer shall&nbsp; remain fully liable to the data exporter for the performance of the subprocessor&rsquo;s&nbsp; obligations under such agreement.&nbsp;<\/p>\n\n\n\n<p>2. The prior written contract between the data importer and the subprocessor shall also&nbsp; provide for a third-party beneficiary clause as laid down in Clause 3 for cases where the&nbsp; data subject is not able to bring the claim for compensation referred to in paragraph 1 of&nbsp; Clause 6 against the data exporter or the data importer because they have factually&nbsp; disappeared or have ceased to exist in law or have become insolvent and no successor&nbsp; entity has assumed the entire legal obligations of the data exporter or data importer by&nbsp; contract or by operation of law. Such third-party liability of the subprocessor shall be&nbsp; limited to its own processing operations under the Clauses.<\/p>\n\n\n\n<p>3. The provisions relating to data protection aspects for subprocessing of the contract referred&nbsp; to in paragraph 1 shall be governed by the law of the Member State in which the data&nbsp; exporter is established.<\/p>\n\n\n\n<p>4. The data exporter shall keep a list of subprocessing agreements concluded under the&nbsp; Clauses and notified by the data importer pursuant to Clause 5 (j), which shall be updated&nbsp; at least once a year. The list shall be available to the data exporter&rsquo;s data protection&nbsp; supervisory authority.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Clause 12 &#8211; Obligation after the termination of personal data processing services<\/strong><\/h2>\n\n\n\n<p>1. The parties agree that on the termination of the provision of data processing services,&nbsp; the data importer and the subprocessor shall, at the choice of the data exporter, return&nbsp; all the personal data transferred and the copies thereof to the data exporter or shall&nbsp; destroy all the personal data and certify to the data exporter that it has done so, unless&nbsp; legislation imposed upon the data importer prevents it from returning or destroying all or&nbsp; part of the personal data transferred. In that case, the data importer warrants that it will&nbsp; guarantee the confidentiality of the personal data transferred and will not actively process&nbsp; the personal data transferred anymore.<\/p>\n\n\n\n<p>2. The data importer and the subprocessor warrant that upon request of the data exporter&nbsp; and\/or of the supervisory authority, it will submit its data processing facilities for an audit&nbsp; of the measures referred to in paragraph 1.<\/p>\n\n\n\n<p><strong>ANNEX A: FURTHER PROVISIONS<\/strong><\/p>\n\n\n\n<p><strong>A. General Data Protection Regulation<\/strong>: References throughout these Clauses to Directive&nbsp; 95\/46\/EC shall be read as references to the General Data Protection Regulation&nbsp; (2016\/679) (the \u201c<strong>Regulation<\/strong>\u201d), or, if the data exporter is established in the United Kingdom&nbsp; (the \u201c<strong>UK<\/strong>\u201d), to the Regulation and\/or any UK local law which implements or supplements&nbsp; the Regulation, as applicable from time to time, and in each case references to specific&nbsp; articles or provisions of the Directive shall be read as references to the equivalent article&nbsp; or provision in the Regulation or UK local law, where possible and as appropriate.&nbsp;<\/p>\n\n\n\n<p><strong>B. Onward Subprocessing<\/strong>: For the purposes of Clause 11 of these Clauses, the data&nbsp; exporter hereby consents to the data importer subcontracting any or all of its data&nbsp; processing operations performed under these Clauses in accordance with the DPA.&nbsp;<\/p>\n\n\n\n<p><strong>C. Data importers established in \u2018adequate\u2019 countries<\/strong>: To the extent monday.com\/l Ltd. is&nbsp; the recipient and processor of personal data pursuant to these Clauses and is:<\/p>\n\n\n\n<p>(i) established in a jurisdiction recognised by the European Commission (or, if the&nbsp; data exporter is established in the UK, then recognized by the relevant authorities&nbsp; in the UK) as providing an adequate level of protection for personal data, the terms&nbsp; of the DPA concerning transfers of personal data to other countries shall apply,&nbsp; such that these Clauses will apply solely on onward transfer of the imported data&nbsp; to monday.com\/l Ltd.\u2019s sub-processors that are located in a jurisdiction not&nbsp; recognised by the European Commission as providing an adequate level of&nbsp; protection for personal data; or<\/p>\n\n\n\n<p>(ii) established in a jurisdiction not recognised by the European Commission as&nbsp; providing an adequate level of protection for personal data, monday.com\/l Ltd. shall&nbsp; be the data importer for the purposes of these Clauses.<\/p>\n\n\n\n<p><strong>D. Data exporters established outside the European Economic Area<\/strong>: To the extent the&nbsp; data exporter pursuant to these Clauses is established in a jurisdiction outside the&nbsp; European Economic Area, these Clauses shall apply solely in respect of transfers of&nbsp; personal data concerning individuals residing within the European Economic Area. In such&nbsp; cases, references to \u201cMember State\u201d shall be read as references to the Member State&nbsp; applicable in respect of the data exporter\u2019s processing activities in relation to these&nbsp; Clauses which concern personal data of individuals residing within the European&nbsp; Economic Area.&nbsp;<\/p>\n\n\n\n<p><strong>E. Instructions<\/strong>: For the purposes of Clause 5(a) of the Standard Contractual Clauses, the&nbsp; processing described in the DPA and any other mutually agreed upon written instrument&nbsp; by data exporter and data importer constitute as data exporter\u2019s instructions to data&nbsp; importer at the time of entering the DPA and\/or such written instrument, to process&nbsp; Personal Data on data exporter\u2019s behalf. Any additional or alternate instructions shall be&nbsp; subject to the terms of the DPA.<\/p>\n\n\n\n<p><strong>F. Suspension of Data Transfers and Termination<\/strong>: If, pursuant to Clause 5(a), the data&nbsp; exporter intends to suspend the transfer of personal data and\/or terminate these Clauses,&nbsp; it shall provide notice to the data importer and provide data importer with 30 days to cure&nbsp; the non-compliance (\u201c<strong>Cure Period<\/strong>\u201d). If after the Cure Period the data importer has not or&nbsp; cannot cure the non-compliance then the data exporter may suspend or terminate the<\/p>\n\n\n\n<p>transfer of personal data immediately. The data exporter shall not be required to provide&nbsp; such notice in instances where it considers there is a material risk of harm to data subjects&nbsp; or their personal data. Notwithstanding any other terms in this Section F, in the event these&nbsp; Clauses cease to be an appropriate safeguard for the transfer of the personal data in&nbsp; accordance with the applicable data protection law by virtue of a binding decision by a&nbsp; competent supervisory authority, the terms of the DPA concerning modifications&nbsp; necessary pursuant to legislative and regulatory changes shall apply.&nbsp;<\/p>\n\n\n\n<p><strong>G. Data importer\u2019s assistance<\/strong>: In the event the data exporter seeks to conduct any&nbsp; assessment of the adequacy of these Clauses for the protection of the personal data being&nbsp; transferred, the data importer shall provide reasonable assistance to the data exporter for&nbsp; the purpose of any such assessment.&nbsp;<\/p>\n\n\n\n<p><strong>H. Audit Rights<\/strong>: Data exporter acknowledges and agrees that it exercises its audit right&nbsp; under Clause 5(f) and Clause 12.2 by instructing data importer to comply with the audit&nbsp; measures described in the DPA.&nbsp;<\/p>\n\n\n\n<p><strong>I. Transfers from Switzerland<\/strong>: Notwithstanding Section D above, in respect of data&nbsp; transfers from a data exporter established in Switzerland, these Clauses shall be&nbsp; interpreted in accordance with the governing law in Switzerland. In such cases, references&nbsp; throughout these Clauses to Directive 95\/46\/EC shall be read as references to the relevant&nbsp; legislation in Switzerland concerning data protection, privacy, data security or the handling&nbsp; of information about individuals applicable to the data exporter, and defined terms in&nbsp; Clause 1 shall have the meanings given to them (or reasonably equivalent terms) in such&nbsp; legislation. References to \u201cMember State\u201d shall be read as references to Switzerland.&nbsp; Without prejudice to Section A above, the parties further agree that that in respect of data&nbsp; transfers where, under applicable privacy laws, the definition of \u201cpersonal data\u201d (or such&nbsp; reasonably equivalent term) extends to information relating to legal entities, references in&nbsp; these Clauses to \u201cpersonal data\u201d shall also include information relating to legal entities.&nbsp; The parties further agree that, where required by applicable law or upon the request of the&nbsp; relevant supervisory authority, they will do all such further acts as may reasonably be&nbsp; required to grant effect to this Section H, including (but not limited to) executing all&nbsp; documents.<\/p>\n\n\n\n<p><strong>APPENDIX 1&nbsp;<\/strong><\/p>\n\n\n\n<p><strong>to the Standard Contractual Clauses<\/strong><\/p>\n\n\n\n<p><strong>Data exporter&nbsp;<\/strong><\/p>\n\n\n\n<p>The data exporter is the entity identified as \u201cCustomer\u201d or \u201cController\u201d in the DPA. <strong>Data importer&nbsp;<\/strong><\/p>\n\n\n\n<p>The data importer is monday.com\/l Ltd., a provider of web services, and\/or its sub-processor (as&nbsp; such term is used in the DPA), as determined by monday.com\/l Ltd. in accordance with the terms of the DPA concerning cross-border data transfers.<\/p>\n\n\n\n<p><strong>Data subjects&nbsp;<\/strong><\/p>\n\n\n\n<p>The personal data transferred concern the categories of data subjects defined in the DPA.&nbsp; <strong>Categories of data&nbsp;<\/strong><\/p>\n\n\n\n<p>The personal data transferred concern the categories of data defined in the DPA.&nbsp; <strong>Processing operations&nbsp;<\/strong><\/p>\n\n\n\n<p>The personal data transferred will be subject to the basic processing activities defined in Annex&nbsp; 1 to the DPA.&nbsp;<\/p>\n\n\n\n<p><strong>APPENDIX 2&nbsp;<\/strong><\/p>\n\n\n\n<p><strong>to the Standard Contractual Clauses<\/strong><\/p>\n\n\n\n<p><strong>Description of the technical and organisational security measures implemented by the&nbsp; data importer in accordance with Clauses 4(d) and 5(c) (or document\/legislation attached):&nbsp;<\/strong><\/p>\n\n\n\n<p>The technical and organisational security measures implemented by the data importer are as&nbsp; described in the DPA.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Signer la version en ligne L&rsquo;exportateur de donn\u00e9es et l&rsquo;importateur de donn\u00e9es, tel que d\u00e9finis dans l&rsquo;addendum relatif au traitement des donn\u00e9es de monday.com ou par tout autre accord ou addendum effectivement r\u00e9gissant le traitement des donn\u00e9es personnelles par l&rsquo;importateur de donn\u00e9es pour le compte de l&rsquo;exportateur de donn\u00e9es, dont tous les annexes, et pi\u00e8ces&#8230;<\/p>\n","protected":false},"author":15,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[20],"tags":[],"class_list":["post-1082","post","type-post","status-publish","format-standard","hentry","category-confidentialite"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Clauses contractuelles types (CCT) (du responsable du traitement au sous-traitant) - monday.com Legal Portal<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Clauses contractuelles types (CCT) (du responsable du traitement au sous-traitant) - monday.com Legal Portal\" \/>\n<meta property=\"og:description\" content=\"Signer la version en ligne L&rsquo;exportateur de donn\u00e9es et l&rsquo;importateur de donn\u00e9es, tel que d\u00e9finis dans l&rsquo;addendum relatif au traitement des donn\u00e9es de monday.com ou par tout autre accord ou addendum effectivement r\u00e9gissant le traitement des donn\u00e9es personnelles par l&rsquo;importateur de donn\u00e9es pour le compte de l&rsquo;exportateur de donn\u00e9es, dont tous les annexes, et pi\u00e8ces...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/\" \/>\n<meta property=\"og:site_name\" content=\"monday.com Legal Portal\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-24T14:49:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-04-22T10:38:06+00:00\" \/>\n<meta name=\"author\" content=\"Legal Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Legal Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"36 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/\",\"url\":\"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/\",\"name\":\"Clauses contractuelles types (CCT) (du responsable du traitement au sous-traitant) - monday.com Legal Portal\",\"isPartOf\":{\"@id\":\"https:\/\/monday.com\/l\/ja\/#website\"},\"datePublished\":\"2020-11-24T14:49:27+00:00\",\"dateModified\":\"2021-04-22T10:38:06+00:00\",\"author\":{\"@id\":\"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/monday.com\/l\/ja\/#website\",\"url\":\"https:\/\/monday.com\/l\/ja\/\",\"name\":\"monday.com Legal Portal\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/monday.com\/l\/ja\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb\",\"name\":\"Legal Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g\",\"caption\":\"Legal Team\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Clauses contractuelles types (CCT) (du responsable du traitement au sous-traitant) - monday.com Legal Portal","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/","og_locale":"fr_FR","og_type":"article","og_title":"Clauses contractuelles types (CCT) (du responsable du traitement au sous-traitant) - monday.com Legal Portal","og_description":"Signer la version en ligne L&rsquo;exportateur de donn\u00e9es et l&rsquo;importateur de donn\u00e9es, tel que d\u00e9finis dans l&rsquo;addendum relatif au traitement des donn\u00e9es de monday.com ou par tout autre accord ou addendum effectivement r\u00e9gissant le traitement des donn\u00e9es personnelles par l&rsquo;importateur de donn\u00e9es pour le compte de l&rsquo;exportateur de donn\u00e9es, dont tous les annexes, et pi\u00e8ces...","og_url":"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/","og_site_name":"monday.com Legal Portal","article_published_time":"2020-11-24T14:49:27+00:00","article_modified_time":"2021-04-22T10:38:06+00:00","author":"Legal Team","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"Legal Team","Dur\u00e9e de lecture estim\u00e9e":"36 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/","url":"https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/","name":"Clauses contractuelles types (CCT) (du responsable du traitement au sous-traitant) - monday.com Legal Portal","isPartOf":{"@id":"https:\/\/monday.com\/l\/ja\/#website"},"datePublished":"2020-11-24T14:49:27+00:00","dateModified":"2021-04-22T10:38:06+00:00","author":{"@id":"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/monday.com\/l\/fr\/confidentialite\/clauses-contractuelles-types\/"]}]},{"@type":"WebSite","@id":"https:\/\/monday.com\/l\/ja\/#website","url":"https:\/\/monday.com\/l\/ja\/","name":"monday.com Legal Portal","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/monday.com\/l\/ja\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/51ad7dc6d414b4c3b3ba648fb6f838bb","name":"Legal Team","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/monday.com\/l\/ja\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2289d6a8fdd95bc40ce3d58f1012f795?s=96&d=mm&r=g","caption":"Legal Team"}}]}},"_links":{"self":[{"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/posts\/1082","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/comments?post=1082"}],"version-history":[{"count":3,"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/posts\/1082\/revisions"}],"predecessor-version":[{"id":1395,"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/posts\/1082\/revisions\/1395"}],"wp:attachment":[{"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/media?parent=1082"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/categories?post=1082"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/monday.com\/l\/fr\/wp-json\/wp\/v2\/tags?post=1082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}