19.1.
In this Condition 19, the terms “data controller”, “data processor”, “personal data”, “sensitive personal data”, “data subject” and “process” will each have the meaning attributed to them in the DPA until 25 May 2018 and thereafter the meaning set out in the GDPR.
19.2.
Chase Direct Ltd t/a Yourmobile.com operates in accordance with the Data Protection Legislation. The Customer agrees that its details, or those of its Users may be used and disclosed by Yourmobile.com for the purposes of:
a) for providing the Services, equipment and related products to the Customer, administration of the Customer’s account and billing, advertising, marketing, research, analytics, credit scoring, customer services, tracking the equipment the Customer is using on the Network and web use and profiling the Customer’s preferences. Yourmobile.com may disclose the Customer’s information to its service providers and agents to help with these purposes
b) for marketing purposes including informing the Customer and its Users from time to time about other Services or associated technologies; and
c) fulfilling the terms of the Agreement.
19.3.
Yourmobile.com and its selected Third Parties may also use the location of the equipment that the Customer is using with the Network to tell the Customer about:
a) products and services of Yourmobile.com or a Third Party’s,
b) products and services that may be of interest to the Customer and for research and analytics purposes.
19.4.
If the Customer or a User does not want its details, or, in the case of the Customer those details of its Users to be used for direct marketing purposes in this way then the Customer should contact yourmobile.com via the website or by calling 0345 222 6000 or at the following address; Chase Direct Ltd, Grosvenor House, Hollinswood Road, Telford, TF2 9TW
19.5.
The Customer will ensure that its Users have consented to the use of their details in accordance with Condition 19.2. a. Customer details and those of its Users shall be treated in accordance with yourmobile.com’s Privacy Policy.
19.6.
Yourmobile.com will keep the Customer’s information for a reasonable period after the Service Term ends or is terminated by the Customer or the Agreement is terminated for any reason in case the Customer decides to use yourmobile.com’s Services again and may contact the Customer about yourmobile.com’s Services during this time.
19.7.
The Customer’s data may also be used for other purposes for which the Customer gives or any User gives specific permission in the Agreement or otherwise or when required by law or where permitted under the Data Protection Legislation.
19.8.
The parties shall comply with the provisions and obligations imposed on them by the Data Protection Legislation at all times when processing personal data in connection with this Agreement, which processing shall be in respect of the types of personal data, categories of data subjects, nature and purposes required for the performance of their rights and obligations under this Agreement and the provision of the Services. To the extent that yourmobile.com is required as part of the Services to process personal data as a data processor only, Yourmobile.com shall:
a) process such personal data
(i) only in accordance with the Customer’s written instructions from time to time (including those set out in this Agreement), unless it is otherwise required by Applicable Laws (in which case, unless such law prohibits such notification on important grounds of public interest, yourmobile.com shall notify the Customer of the relevant legal requirement before processing the personal data), and
(ii) only for the duration of this Agreement;
b) not process such personal data for any purpose other than those set out in this Agreement or otherwise expressly authorised by the Customer;
c) take reasonable steps to ensure the reliability of all its personnel who have access to such personal data, and ensure that any such personnel are committed to binding obligations of confidentiality when processing such personal data;
d) implement and maintain technical and organisational measures and procedures to ensure an appropriate level of security for such personal data, including protecting such personal data against the risks of accidental, unlawful or unauthorised destruction, loss, alteration, disclosure, dissemination or access;
e) not transfer such personal data outside the European Economic Area without the prior written consent of the Customer;
f) inform the Customer within 36 hours if any such Personal Data is (while within yourmobile.com’s or its subcontractors’ possession or control) subject to a personal data breach (as defined in Article 4 of GDPR) or is lost or destroyed or becomes damaged, corrupted or unusable;
g) only appoint a third party (including any subcontractors) to process such personal data with the prior written consent of the Customer;
h) not disclose any personal data to any data subject or to a third party other than at the written request of the Customer or as expressly provided for in this Agreement:
i) return or irretrievably delete all personal data within one month of the termination or expiry of this Agreement, and not make any further use of such personal data (except to the extent Applicable Laws require continued storage of the personal data by yourmobile.com and yourmobile.com has notified the Customer accordingly);
j) provide to the Customer and any DP Regulator all information and assistance necessary or desirable to demonstrate or ensure compliance with the obligations in this Condition 19 and/or the Data Protection Legislation;permit the Customer or its representatives to access any relevant premises, personnel or records of yourmobile.com on reasonable notice to audit and otherwise verify compliance with this Condition
k) take such steps as are reasonably required to assist the Customer in ensuring compliance with its obligations under Articles 30 to 36 (inclusive) of GDPR;
l) notify the Customer within ten (10) Business Days if it receives a request from a data subject to exercise its rights under the Data Protection Legislation in relation to that person’s personal data; and
m) provide the Customer with its full co-operation and assistance in relation to any request made by a data subject to exercise its rights under the Data Protection Legislation in relation to that person’s personal data.
19.9.
Yourmobile.com may transfer Personal Data in connection with the provision of the Services, including to any subcontractor or supplier, and such transfer may be outside the European Economic Area. In such circumstances yourmobile.com will:
a) take reasonable steps to ensure the reliability of such subcontractors and prior to any such transfer will enter into a written agreement with such subcontractor containing contractual provisions which ensure an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of the Personal Data; and
b) comply with the Eighth Data Protection Principle set out in Schedule 1 of the Data Protection Act 1998 by providing an adequate level of protection to any Personal Data that is transferred.
19.10.
The Customer acknowledges that when acting as a data processor, yourmobile.com is reliant on the Customer for direction as to the extent yourmobile.com is entitled to use and process the personal data in connection with the Services. Consequently, yourmobile.com shall be entitled to relief from liability in circumstances where a data subject makes a claim or complaint with regards to yourmobile.com’s actions to the extent that such actions result from instructions received from the Customer.
19.11.
If either Party receives any complaint, notice or communication which relates directly or indirectly to the processing of personal data under this Agreement or to either Party’s compliance with the Data Protection Legislation, it shall as soon as reasonably practicable notify the other Party and it shall provide the other Party with reasonable co-operation and assistance in relation to any such complaint, notice or communication.
19.12.
Yourmobile.com and/or a Network Operator or supplier may at the request of the Customer monitor and record calls made by the Customer using the VoIP Services
a) to enable yourmobile.com to investigate and, if possible, resolve any voice call quality issue reported to it by the Customer and/or
b) on behalf of the Customer as part of the VoIP Service. Yourmobile.com or a Network Operator or supplier may also monitor and record its communications with the Customer, including emails and phone conversations for training purposes, quality assurance, to record details about the Services ordered by the Customer or in order for yourmobile.com or a Network Operator or supplier to meet its legal and regulatory obligations generally. Information collected by yourmobile.com or a Network Operator shall be stored and processed in accordance with Yourmobile.com’s Privacy Policy.
c) The Customer agrees and acknowledges that yourmobile.com and/or Plan.com may monitor and record calls to 999 and 112 emergency services.
d) All such recordings shall be used solely for the purposes set out above and shall remain the Confidential Information of the Customer. In relation to VoIP Service call recording conducted on behalf of the Customer, to the extent that any such call includes any personal data yurmobile.com shall act as the Customer’s data processor when processing such personal data.