Data Protection Legislation:  (i) the General Data Protection Regulation ((EU) 2016/679) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in Romania and (ii) any successor legislation to the GDPR or the Law no 677/2001 on general data protection.  a


1.1  Both parties will comply with all applicable requirements of the Data Protection Legislation. This clause [NUMBER] is in addition to, and does not relieve, remove or replace, a party’s obligations under the Data Protection Legislation.

1.2   Without prejudice to the generality of clause 1.1 both Parties have all necessary and appropriate consents and notices in place to use the Personal Data for the purposes of this Agreement. 

1.3  Without prejudice to the generality of clause 1.1, the Media Med shall, in relation to any Personal Data processed in connection with the performance by the Media Med of its obligations under this agreement:

(a)  process that Personal Data only within the scope of this Agreement;

(b)  ensure that it has in place appropriate technical and organisational measures, to protect against unauthorised or unlawful processing of Personal Data and against accidental loss or destruction of, or damage to, Personal Data, appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures (those measures may include, where appropriate, pseudonymising and encrypting Personal Data, ensuring confidentiality, integrity, availability and resilience of its systems and services, ensuring that availability of and access to Personal Data can be restored in a timely manner after an incident, and regularly assessing and evaluating the effectiveness of the technical and organisational measures adopted by it);

(c)  assist the Customer, at the Customer’s cost, in responding to any request from a Data Subject and in ensuring compliance with its obligations under the Data Protection Legislation with respect to security, breach notifications, and consultations with supervisory authorities or regulators;

1.4  Without prejudice to the generality of clause 1.1, both Parties shall, in relation to any Personal Data processed in connection with this agreement:

(a)  ensure that all personnel who have access to and/or process Personal Data are obliged to keep the Personal Data confidential; and

(b)  notify the each other without undue delay on becoming aware of a Personal Data breach in relation to the Personal Data processed under this Agreement ;

(c)  maintain complete and accurate records and information to demonstrate its compliance with this clause [NUMBER].

Romanian version


Legislatia privind protectia datelor cu caracter personal: (i) Regulamentul general privind protectia datelor cu caracter persoanl ((EU) 2016/679) si orice alte legi, regulamente sau norme secundare de implementare nationale, asa cum sunt modificate sau actualizate in Romania, si (ii) orice legislatie anterioara in domeniul de reglementare a GDPR sau Legea nr. 677/2001 pentru protectia persoanelor cu privire la prelucrarea datelor cu caracter personal si libera circulatie a acestor date. 


1.1 Ambele Parti vor respecta toate cerintele aplicabile prevazute in Legislatia privind protectia datelor cu caracter personal. Aceasta clauza [NUMAR] este in completare si nu exclude, elimina sau inlocuieste obligatiile partilor prevazute de Legislatia privind protectia datelor cu caracter personal.

1.2 Fara a aduce atingere clauzei 1.1, ambele parti detin consimtamantul si notificarile astfel cum sunt ele necesar si aplicabile pentru a folosi Datele Personale in scopurile prevazut de acest Contract; 

1.3 Fara a aduce atingere clausei 1.1, Media Med, in relatie cu Datele Personale procesate in legatura cu executare obligatiilor din acest Contract,:

(a) Va Procesa acele Date Personale necesare infaptuirii scopului Contractului;

(b) Se va Asigura ca dispune de masuri tehnice si organizatorice adecvate pentru a proteja impotriva prelucrarii neautorizate sau ilegale a datelor cu caracter personal si impotriva pierderii accidentale sau a distrugerii sau deteriorarii datelor personale, masuri corespunzatoare prejudiciilor care ar putea rezulta din prelucrarea neautorizata sau ilegala sau pierderea accidentala, distrugerea datelor precum si naturii datelor care trebuie protejate, tinand seama de stadiul dezvoltarii tehnologice si de costurile de punere in aplicare a oricaror masuri (aceste masuri pot include, dupa caz, pseudonimizarea si criptarea datelor cu caracter personal, asigurarea confidentialitatii, integritatii, disponibilitatii si rezilientei sistemele si serviciile sale, care asigura ca disponibilitatea si accesul la datele cu caracter personal pot fi restaurate in timp util dupa un incident, evaluand in mod regulat si evaluand eficacitatea masurilor tehnice si organizatorice adoptate de acesta;)

(c) va asists Clientul, pe cheltuiala Clientului, pentru a raspunde la orice solicitare a unui Destinatar si pentru a asigura respectarea obligatiilor sale in conformitate cu Legislatia privind protectia datelor cu caracter personal in ceea ce priveste securitatea, notificarile privind incalcarea si consultarile cu autoritatile de supraveghere sau autoritatile de reglementare

1.4 Fara a aduce atingere generalitatii clauzei 1.1, ambele Parti, in legatura cu orice Date Personale prelucrate in relatie cu acest Contract, aore obligatia:

(a) sa se asigure ca intregul personal care are acces la si/sau prelucreaza Date Personaleonal este obligat sa pastreze confidentialitatea Datelor Personale; si

(b) sa isi notifice reciproc fara intarzieri nejustificate, luarea la cunostinta de orice incalcare a confidentialitatii a Datelor Personale in legatura cu Datele Personale prelucrate in temeiul prezentului Contract;

(c) sa pastreze inregistrari si imformatii complete si exacte pentru a putea proba conformitatea cu aceasta clauza [Numar].