1. PRIVACY AND DATA PROTECTION
1.1 Gazelli shall comply with all applicable data protection and privacy laws and regulations in the performance of its obligations set out under this Agreement, including but not limited to the General Data Protection Regulation (“GDPR”, from the GDPR implementation date) or, until GDPR implementation date, the Data Protection Act 1998 (“Data Protection Laws”).
1.2 Gazelli will process personal data in accordance with the Data Protection Laws, the terms of this Agreement and any lawful instructions reasonably given by You from time to time.
1.3 Gazelli will not transfer Your Data outside of the EEA, other than in accordance with your actions or express authorisation, unless required provisions set out in the Data Protection Laws are in place in relation to such international transfer.
1.4 Gazelli shall ensure that it has all required consents in place regarding the use of Your Data in accordance with the terms of this Agreement;
1.5 Should You require Gazelli to permanently delete data held about you, or remove Your consent to a use of the personal data, Gazelli shall delete such part of Your data from its systems, but for any which is required to be retained for legal, regulatory, compliance or audit purposes, or cease using that element of Your Data for the specified use.
1.6 Gazelli shall take appropriate technical and organisational measures against unauthorised or unlawful processing of the personal data or its accidental loss, destruction or damage.