​

Applicable Laws means (for so long as and to the extent that they apply to JRD Fulfilment) the law of the European Union, the law of any member state of the European Union and/or Domestic UK Law; and Domestic UK Law means the UK Data Protection Legislation and any other law that applies in the UK.

​

In respect of any personal data processed by JRD Fulfilment as a result of, the parties acknowledge that for the purposes of the Data Protection Legislation, the Customer is the controller and JRD Fulfilment is the processor.

​

The Customer will ensure that it has all necessary appropriate consents and notices in place to enable lawful transfer of personal data to JRD Fulfilment for the duration and purposes of the Contract.

​

JRD Fulfilment shall, in relation to any personal data processed in connection with the performance by JRD Fulfilment of its obligations:

process that personal data only on the documented written instructions of the Customer unless JRD Fulfilment is required by Applicable Laws to otherwise process that personal data. Where JRD Fulfilment is relying on Applicable Laws as the basis for processing personal data, JRD Fulfilment shall promptly notify the Customer of this before performing the processing required by the Applicable Laws unless those Applicable Laws prohibit JRD Fulfilment from so notifying the Customer; ensure that it has in place appropriate technical and organisational measures to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures; ensure that all personnel who have access to and/or process personal data are obliged to keep the personal data confidential; not transfer any personal data outside of the UK and the European Economic Area unless the prior written consent of the Customer has been obtained, and where such consent is granted, only transfer the personal data under the following conditions: JRD Fulfilment transfers personal data to a territory which is subject to a current finding by the European Commission under the Data Protection Legislation that the territory provides adequate protection for the privacy rights of individuals. JRD Fulfilment shall identify in the Trading Agreement the territory that is subject to such an adequacy finding; or the Customer or JRD Fulfilment participates in a valid cross-border transfer mechanism under the Data Protection Legislation, so that appropriate safeguards are in place to ensure an adequate level of protection with respect to the privacy rights of individuals as required by Article 46 of the GDPR. The relevant transfer mechanism shall be identified in the Trading Agreement and the Customer shall be informed of any change to that status; or the transfer otherwise complies with the Data Protection Legislation for reasons set out in; assist the Customer, at the Customer's cost, in responding to any request from a data subject and in ensuring compliance with its obligations under the Data Protection Legislation with respect to security, breach notifications, impact assessments and consultations with supervisory authorities or regulators; notify the Customer without undue delay on becoming aware of a personal data breach; at the written direction of the Customer, delete or return personal data and copies thereof to the Customer on termination of the Contract unless required by Applicable Law to store the personal data; and maintain complete and accurate records and information to demonstrate its compliance with this documentation and allow for audits by the Customer.

​

The Customer consents to JRD Fulfilment authorising third parties (subcontractors) to process personal data under the Contract, which shall be carriers or third party storage providers. JRD Fulfilment confirms that it has entered or (as the case may be) will enter into a written agreement with each subcontractor which reflects and will continue to reflect the requirements of the Data Protection Legislation.

 

As between the Customer and JRD Fulfilment, JRD Fulfilment shall remain fully liable for all acts or omissions of any subcontractor appointed by it pursuant.

 

In respect of the appointment by JRD Fulfilment of a subcontractor located outside the UK and the European Economic Area, the Customer authorises JRD Fulfilment to enter into the Standard Contractual Clauses with the relevant subcontractor in the Customer’s name and on its behalf. JRD Fulfilment will make the executed Standard Contractual Clauses available to the Customer on request.