WorkDay_-_MSA_-_ERP_453086 - Laserfiche WebLink

Home

Confidential ©2022 Workday (UDPE Global v22.3) Page 4 City of San Leandro 9. Return and Deletion of Personal Data Upon termination of the Covered Service, Workday shall return and delete Personal Data in accordance with the relevant provisions of the Agreement. 10. Transfers of European Personal Data 10.1 Transfer Safeguards. The transfer safeguards listed below shall apply to all Restricted Transfers. 10.2 Binding Corporate Rules.For the Covered Services identified in Addendum B, the Workday BCRs apply to the Processing of Personal Data of a Customer or Customer Affiliate established in the EEA. In this event, all provisions of the Workday BCRs are incorporated by this reference and shall be binding and enforceable for Customer according to Section 1.4 of the Workday BCRs as if they were set forth in this DPE in their entirety. If any conflict or inconsistency arises between this DPE and the Workday BCRs, the Workday BCRs shall prevail. 10.3 Processor-to-Processor SCCs. Where Workday is located within the EEA, Workday has implemented the Standard Contractual Clauses for any Restricte 10.4 Controller-to-Processor SCCs. Where Workday is located in a Restricted Country, the Standard Contractual follows: 10.4.1 EU Personal Data.In relation to Personal Data that is protected by the EU GDPR, the EU SCCs will apply completed as follows: (i) Module 2 applies unless the Customer is a Processor in which case Module 3 applies; (ii) in Clause 7, the optional docking clause will not apply; (iii) in Clause 9, Option 2 will apply, and the time period for prior notice of subprocessor changes will be in accordance with the notification process set out in Section 3.2 of this DPE; (iv) in Clause 11, the optional redress language will not apply; (v) in Clause 17, Option 1 will apply, and the Standard Contractual Clauses will be governed by the law specified in the MSA, provided that law is an EU Member State law recognizing third party beneficiary rights, otherwise, the laws of Ireland apply; (vi) in Clause 18(b), disputes shall be resolved before the courts specified in the MSA, provided these courts are located in an EU Member State, otherwise those courts shall be the courts of Ireland; (vii) Annex I of the Standard Contractual Clauses shall be deemed completed with the information set out in Annex I to this DPE; and (viii) Annex II of the Standard Contractual Clauses shall be deemed completed with the information set out in Annex II to this DPE. 10.4.2 UK Personal Data.In relation to Personal Data that is protected by the UK GDPR, the UK SCCs will apply as follows: (i) For so long as it is lawfully permitted to rely on the Standard Contractual Clauses set out in the European 2010 SCCs ) for transfers of Personal Data protected by the UK GDPR, the 2010 SCCs shall apply between the Customer and Workday completed as follows: (a) Appendix 1 shall be completed with the relevant information set out in Annex I to this DPE; and (b) Appendix 2 shall be completed with the relevant information set out in Annex II to this DPE. Docusign Envelope ID: B7B2CF4A-C414-47B2-BF08-2BCDA4573B8E