Redact
Redact
1. DEFINITIONS
1.1. charges listed for additional services in Appendix III.
1.2.
1.3.
1.4. a bank account which is compliant with Section 42 Landlord & Tenant Act
1987
1.5. means the services as set out in Appendix IV
1.6.
named in the cover sheet to this agreement.
1.7.
1.8.
the UK, the GDPR and any national implementing laws, regulations and secondary legislation, as
amended or updated from time to time, in the UK and then (ii) any successor legislation to the
GDPR or the Data Protection Act 2018.
1.9.
this Agreement, which may be updated from time to time by the written agreement of the Parties.
1.10. means, in relation to a party, its subsidiaries or holding companies from time to
time, any company under common control of or with the party, and any subsidiary of any holding
company from time to time.
1.11.
Property Transfer fees, and the Company Secretarial fees.
1.12.
1.13.
1.14.
1.15.
and as described at the end of this agreement.
1.16. VII
1.17.
1.18.
1.19. this agreement is for a fixed term of one year less one day from 15th March 2024 unless
terminated earlier in accordance with Clause 13.
2 APPOINTMENT
2.1 The Client appoints the Manager to be its managing agent for the Property for the Term.
2.2 For the duration of this agreement, and subject to clause 10.6, the Manager may enter into such
contracts as are reasonably necessary for the management functions of the Property in relation to the
Services being provided under this agreement on behalf of an in the name of the Client.
2.3 The Client agrees to the terms of this agreement and will be deemed to be bound by them upon the
earlier of:
2.3.1 Signature of the agreement by the Client and the Manager: or
2.3.2 Commencement of the provision of the Services by the Manager, in which case the agreement
will be deemed to have come into effect from the date of the provision of the first of such
Services.
3.1 the Services set out with the frequency as agreed and specified in Appendix II for the Management Fee
as set out in Appendix I.
3.2 the Additional Services for the Additional Charges as set out in Appendix III
3.3 the Building Safety Services for the fees set out in Appendix IV and
3.4 the Property Transfer Services for the fees set out in Appendix VII
Parties.
6.6 the Client will act promptly and without delay.
6.7 If requested to do so by the Manager, the Client will provide instruction to the Manager without delay,
and will not unreasonably withhold such instructions.
6.8 If requested to do so pursuant to Clause 10.7, the Client will promptly review and respond to the
enable the Manager to continue providing the Services.
6.9 If work is required to comply with health and safety legislation, to authorise the Manager to proceed
with that work or, in the absence of such authorisation, to indemnify the Manager against all liabilities,
expenses, damages, and costs (including legal and professional costs) arising.
6.10 The Client is not required Term but
is advised to do so.
6.11 The Client will keep the Manager informed of any notices, sales of leaseholds or freehold, possible
formation of resident associations, exercise of the right to manage, enfranchisement, applications to the
First-tier Tribunal (Property Chamber), or any other matter relating to the management of the Property
of which the Client becomes aware.
6.12 When oral instructions are given by the Client to the Manager, these should be confirmed in writing by
post or email within 7 days.
6.13
undertakings and provided supporting information to substantiate their capabilities in their chosen
field. It is recognised that the Client may from time to time wish to nominate their own contractors to
work on the Property and in such circumstances the Client will use their best endeavours to ensure that
(as notified
by the Manager from time to time) or, in the absence of such compliance, will indemnify the Manager
in relation to any issues that may arise as a result of such non-compliance.
6.14 The Client recognises that a shared objective between it and the Manager is to improve the sustainability
of the management of the Property and accordingly it will support the Manager in the implementation
of initiatives which are compatible with this objective. These will include (but will not be limited to) the
implementation of electronic billing and electronic service of legal documentation. The Client
acknowledges that such initiatives may include the introduction of a nominal fee being charged in
Standard Management Agreement (V21)
R&R Residential Management Limited Page 5 of 35
respect of lessees who insist on paper records being served, to cover the duplication of effort and out-
of-pocket expenses involved.
6.15 Where public liability insurance is not arranged by the Manager, the Client will either:
6.15.1 Ensure that the Manager is named as an insured party on the policy; or
6.15.2
premium, equivalent to £10 + VAT per unit per annum.
10
10.1 The Manager will comply with statutory, ARMA and RICS rules for banking and holding any funds of the
Client in one or more Bank Accounts. Any such client funds will be held in trust for the benefit of the
leaseholders of the Property in accordance with Section 42 of the Landlord and Tenant Act 1987.
10.2 The Manager will open one or more Bank Accounts on behalf of the Client in the name of the Property
or name of the Client for the receipt of all money due to the Client and the payment of expenses relating
to the Property and, where required, the Manager will open a further Bank Account(s) on behalf of the
Client in the name of the Property or name of the Client for the receipt of reserve fund(s) contributions
made by lessees. In addition, the Manager operates a common receipts account to receive all income
which is then promptly transferred to the designated Client bank accounts. This account is held with
Bank of Scotland, account number 06980028 and titled R&R Ltd Client Receipts Account, or other such
bank and account notified to the client in writing.
10.3 The Client authorises the Manager to make payments for the benefit of the Property (within the limits
set out in Clause 10.6 below) from the Bank Account(s) held for the Property.
10.4 The Client authorises the Manager to deduct any outstanding Fees from the Bank Account following
termination of this management agency agreement.
10.5 It is hereby agreed that interest earned on the Bank Account(s) shall be a credit to that Bank Account(s),
while any negative interest levied shall be charged to that Bank Account(s).
10.6 The expenditure authorisation limit of the Manager without referral to the Client shall be £5,000.00
inclusive of VAT (per item). However, expenditure noted in the annual service charge budget shall not
require separate authorisation.
10.7 The Manager will notify the Client as soon as possible of any lack of funds to pay for the Services. The
Client may put the Manager in funds to pay for services required if there is a deficit for any reason and
the Manager may cease to provide Services if insufficient funds are available. Subject to Clause 10.8
below, the Manager shall not borrow from the reserve funds for the property to pay for Services, unless
the Client has approved this in writing in advance.
10.8 Where deemed reasonably necessary to alleviate a temporary lack of funds, the Client hereby authorises
the Manager to borrow from the reserve account, a sum equivalent to 10% of the annual service charge
budget for the relevant schedule, (excluding reserve contributions) without prior notification or
approval, such loan to be notified to the Client within 5 working days, and subject to funds being repaid
at the earliest opportunity.
Standard Management Agreement (V21)
R&R Residential Management Limited Page 7 of 35
11 LIABILITY
11.1. References to liability in this Clause 11 include every kind of liability arising under or in connection with
this agreement including but not limited to liability in contract, tort (including negligence),
misrepresentation, restitution, deliberate default or otherwise.
11.2. Nothing in this agreement limits any liability which cannot legally be limited, including but not limited
to liability for:
11.2.1. death or personal injury caused by negligence;
11.2.2. fraud or fraudulent misrepresentation; and
11.2.3. breach of the terms implied by section 12 of the Sale of Goods Act 1979 or section 2 of the
Supply of Goods and Services Act 1982 (title and quiet possession).
11.3.
11.3.1. for damage to property caused by the negligence of its employees and agents in connection
with this agreement shall not exceed £2,000,000 for any one event or series of connected
events;
11.3.2. for all other loss or damage which does not fall within sub-clause 11.3.1 shall not exceed
£500,000.
11.4. Subject to Clause 11.2, 500,000.
11.5. Subject to Clause 11.2, the following types of loss are wholly excluded:
11.5.1. Loss of profits.
11.5.2. Loss of sales or business.
11.5.3. Loss of agreements or contracts.
11.5.4. Loss of anticipated savings.
11.5.5. Loss of use or corruption of software, data or information.
11.5.6. Loss of or damage to goodwill.
11.5.7. Indirect or consequential loss.
11.6. Subject to Clause 11.2, the Manager shall not be liable for any loss, injury, damage or legal or other
expenses incurred as a result of:
11.6.1. The Manager having reasonably relied upon the Client to provide accurately all relevant
information;
11.6.2. Any inaccurate forecast by the Manager of future income or expenditure unless done so
negligently;
11.6.3. Any defect in the Property, or plant and machinery, equipment or materials used for the
property, whether or not such defect be latent or apparent upon examination;
11.6.4. The act, omission or insolvency of any person other than the Manager;
11.6.5. Any lack of funds required to meet service charge expenditure in circumstances where such
lack of fund has been notified to the Client and the Client has declined or failed to provide
necessary funding; or
11.6.6. Any loss of use or corruption of software, data, or information
11.7. Unless a party notifies the other party that it intends to make a claim in respect of an event within the
notice period, the other party shall have no liability for that event. The notice period for an event shall
start on the day on which the party wishing to make a claim became, or ought reasonably to have
become, aware of its having grounds to make a claim in respect of the event) and shall expire 12 months
from that date. The notice must be in writing and must identify the event and the grounds for the claim
in reasonable detail.
Property, as it sees fit, including use in marketing materials, provided always that such use shall not refer
to the Property or Client in a negative manner.
19. WAIVER
19.1. A waiver of any right or remedy under this agreement or by law is only effective if given in writing and
shall not be deemed a waiver of any subsequent breach or default.
19.2. A failure or delay by the Manager to exercise any right or remedy provided under this agreement or by
law shall not constitute a waiver of that or any other right or remedy, nor shall it prevent or restrict any
further exercise of that or any other right or remedy. No single or partial exercise of any right or remedy
provided under this agreement or by law shall prevent or restrict the further exercise of that or any other
right or remedy
21. CONFIDENTIALITY
21.1. Each party undertakes that it shall not at any time during this agreement, and for a period of three years
after termination of this agreement, disclose to any person any confidential information concerning the
business, affairs, clients or suppliers of the other party or of any member of the group of companies to
which the other party belongs, except as permitted by Clause 20.2
21.2. information:
21.2.1. to its employees, officers, representatives or advisers who need to know such information for
connection with this agreement. Each party shall ensure that its employees, officers,
23. SEVERANCE
23.1. If any provision or part-provision of this agreement is or becomes invalid, illegal or unenforceable, it
shall be deemed modified to the minimum extent necessary to make it valid, legal and enforceable. If
such modification is not possible, the relevant provision or part-provision shall be deemed deleted. Any
modification to or deletion of a provision or part-provision under this clause shall not affect the validity
and enforceability of the rest of this agreement.
23.2. If one party gives notice to the other of the possibility that any provision or part-provision of this
agreement is invalid, illegal or unenforceable, the Parties shall negotiate in good faith to amend such
provision so that, as amended, it is legal, valid and enforceable, and, to the greatest extent possible,
achieves the intended commercial result of the original provision.
FEE AGREEMENT
a) The Term of this Agreement is as set out in this agreement is for a fixed term of one year less one
th
day from 15 March 2024 unless terminated earlier in accordance with Clause 13.1.19 above.
b) The Management Fee is payable for the services in Appendix II and is the fee set out in the agreed budget
for the Property for the current service charge year, together with:
i. an additional Staff Management Fee as set out in the agreed budget for the Property for the
current service charge year;
ii. A fee for the provision of Employers Liability insurance of £90 + VAT per member of staff employed
at the Property by the Manager.
iii. A fee of £2.50+VAT per quarter per lessee who does not take up electronic service of the service
charge demands and supporting information, and the electronic provision of information relating
to the management of the Property, such fee to be charged directly to the lessee, or to the service
charge
Management
d) The Management Fee and any Additional Charges must be paid to the Manager in accordance with clauses
8 and 9 of the agreement.
e) The Review Date for the Management Fee and Additional Charges is each anniversary of the
commencement date of this agreement or the commencement date of each new service charge year, if
earlier, as agreed with the Client
f) The Ground Rent Collection Fee (where applicable) is N/A collected by a different company (not R&R).
Collecting service charges and reserve fund contributions including sending As dictated by the lease.
demands and associated summaries and any required statements.
Processing payments relating to the Property within expenditure limits and Ongoing.
funds available or as reasonable expediency shall dictate.
Using reasonable endeavours to collect current and on-going routine service Ongoing.
charge arrears but not action requiring legal work or tribunals.
Entering into and managing maintenance contracts on behalf of the Client. Ongoing.
Viewing, without the use of inspection equipment, the common parts of the Monthly.
Property to check condition and deal with any necessary repairs other than
major repairs.
Preparing specifications and contracts for minor works and services such as Ongoing as required.
cleaning, gardening, window cleaning and overseeing such works.
Organising periodic health and safety checks (but not specialist checks and Quarterly.
tests) and ensuring appropriate risk assessments are in place.
Consultation with the Client on management matters (and qualifying works). Ongoing as required.
Consultation with the Client on long-term agreements except for consultation Ongoing as required.
on the appointment of a managing agent.
Engaging and supervising on behalf of the Client site staff for the Property Ongoing as required.
Dealing with day-to-day lessee issues and reporting to and taking instruction Ongoing as required.
Advising the Client on all relevant legislative and regulatory issues and general Ongoing as required.
interpretation of leases.
Maintaining adequate/suitable files and records on the management of the Ongoing as required.
Property.
Keeping records of residents and tenancy details, where provided. Ongoing as required.
Advising and liaising with the Client on management policy. Ongoing as required.
A charge of £25+VAT is
made for a dishonoured
cheque.
Additional work not already included as part of this As required To be agreed based on
Agreement including but not limited to: hourly rates as follows
a) work arising as a result of regulations, requirements or (which rates are subject to
advice documents issued by government, professional annual review as published
or regulatory bodies, or similar organisations; on our website): -
THE PROPERTY
Copy of the Land Certificate.
Plans and drawings of any of the site and buildings.
Details of utilities and location of main stopcocks etc.
Details of any major works and long-term agreements ongoing and copies of S.20 notices and responses
given.
Details of any major works and long-term agreements planned and copies of any related S.20 notices and
responses given.
Details of plant, machinery and relevant documentation.
Copies of statutory inspection reports.
Arrangement for out of hours emergencies.
INSURANCE
Contact details of current broker/insurers.
Original of schedule and policy for the property.
Details of most recent valuation of the property.
Summary of claims history over past three years.
Files on open insurance claims and agreement on who will handle such.
Details of third party and liability (including current and all previous certificates for
liability where employer is not changing).
Originals of mechanical engineering insurance and the last three years' inspection reports.
THE LESSEES
Originals or copies of all leases and deeds of variation and other licences etc.
Copy of any current house rules.
Details of any ongoing assignments.
Names and contact details of all lessees, including those who are not resident.
Details of any sub-let flats and their occupants.
Schedule of ground rents payable.
Schedule of service charge apportionments per unit.
ACCOUNTING INFORMATION
Certified service charge accounts for at least the last three years and preferably six years or longer.
Copy of the current service charge budget.
Bank statements relating to lessee and client monies for the property.
A reconciled copy of the cash book.
Service charge balances and statements.
Paid contractors and invoices for the current period and previous years. (Note: The receipts and
invoices to support service charges belong to landlord so, if the agent changes, all years held should be
handed over. Tribunals can review charges made many years ago if a challenge is made by lessees.)
Outstanding contractors and invoices.
Reconciled trial balance and supporting schedules made up to the date of the handover.
A cheque for the balance of funds in hand.
Method of payment used by each lessee.
Agreed payment plans for arrears if any.
Copy correspondence about any outstanding arrears.
STAFF
Copies of any contracts of employment along with job descriptions.
A full record of each person's employment history.
Details of any disciplinary action taken or other special circumstances.
PAYE records for the current period and the previous years if appropriate.
MISCELLANEOUS
Details of any guarantees.
A full set of labelled keys, any spares and access codes and programming procedures.
Copies of unanswered correspondence and other relevant enquiries.
Rendall and Rittner prides itself on the service that it provides to its customers, however it is recognised that from
time to time, problems occur that give rise to a customer making a complaint. In the interests of good customer
service, and to comply with regulatory requirements, Rendall and Rittner Limited have adopted the following
procedure which will be followed in dealing with any complaint received:
1. We have appointed Adenike Olowe to coordinate complaints. If you wish to make a complaint or have
a query regarding a potential complaint, please do not hesitate to contact her at
CustomerFeedback@rendallandrittner.co.uk. Alternatively you can write to: Rendall and Rittner, 340
Deansgate, Manchester M3 4LY.
2. If you have initially made your complaint verbally, whether face-to-face or on the telephone, we do
ask that you put your complaint in writing to us.
3. Once we have received your written complaint, we will send an acknowledgment email within 3
working days.
4. Within 15 working days of receipt of your written complaint, we will write to you to inform you of the
outcome of our internal investigation into your complaint and let you know what actions, if any, we
have taken or will take. If at this stage, we are unable to conclude our investigations, we will advise you
accordingly, with reasons and confirm our anticipated timescale for conclusion.
5. If, at this stage, you are still not satisfied, you should contact us again and we will arrange for a separate
review to take place by a senior member of staff.
6. We will write to you within 15 working days of receiving your request for a review, confirming our final
viewpoint on the matter.
7. If you are still not satisfied after the last stage of the in-house complaint procedure (or more than
8 weeks has elapsed since the complaint was first made) then you can take the matter up with The
Property Ombudsman without charge:
The Property Ombudsman
Milford House, 43-55 Milford Street, Salisbury, SP1 2BP Tel:
01722 333 306
Email: admin@tpos.co.uk
Website: http://www.tpos.co.uk
The Property Ombudsman requires that all complaints are addressed through this in-house
Subletting, changes of use and handling requests for any Undertaken At a cost to be agreed with
necessary approvals, lease extensions and variations. from time to the Client.
time as needed
RECITALS
A. The Client is a landlord of residential long leasehold properties, or is a management company which
is party to residential long leases.
B. The Manager and its Group provides the Client with day to day property management and service
charge collection services, as set out in the leases and the Management Agreement.
C. It will be necessary for the Parties to share Personal Data with each other in order to perform their
respective functions.
D. In consideration of the mutual obligations set out herein, the Parties agree that the terms and
conditions set out below shall govern the exchanges of Personal Data between them.
1. INTERPRETATION
1.1. The capitalised terms used in this Data Sharing Agreement have the following meanings:
Agreed Purposes: those purposes set out in clause 2.5 of this Data Sharing Agreement.
Business Days: a day other than a Saturday, Sunday or public holiday in England, when banks in
London are open for business.
Data Protection Authority: the relevant data protection authority in the territories where the Parties
to this Data Sharing
Data Receiver: the Party receiving Personal Data from a Data Discloser.
Data Security Breach: a breach of security leading to the accidental or unlawful destruction, loss,
alteration, unauthorised disclosure of, or access to the Shared Personal Data.
GDPR: the General Data Protection Regulation (2016/679) (GDPR) and all applicable laws and
regulations relating to the processing of the Personal Data and privacy, including where applicable
the guidance and codes of practice issued by the UK Information Commissioner or any other national
data protection authority, and the equivalent of any of the foregoing in any relevant jurisdiction.
Shared Personal Data: the Personal Data and Special Category Data to be shared between the
Parties under clause 4 of this Data Sharing Agreement.
Subject Access Request: has the same meaning as "Right of access to personal data" in the GDPR.
Term: shall mean for the period of the specific management agreement in place at any time granted
to the Manager by the Client
Data Controller, Data Processor, Data Subject, Personal Data, Special Category Data,
Processing and appropriate technical and organisational measures shall have the meanings given
to them in the GDPR.
1.2 If there is any ambiguity or inconsistency in or between this Data Sharing Agreement and the
Management Agreement, the terms of the Management Agreement shall have priority.
2.2. The Client requires access to certain Personal Data relating to the residential long leaseholders to
ensure that it can carry out its obligations as landlord pursuant to the leases. The Manager and its
Group require access to certain Personal Data relating to the residential long leaseholders to ensure
that they can carry out day to day property management and service charge collection services,
pursuant to property management agreements granted to it by the Client, as set out in the leases.
2.3. This Data Sharing Agreement is required to ensure that where any Personal Data may be accessed,
such access will at all times comply with the requirements of the GDPR.
2.4. The sharing of Personal Data is necessary to support the Agreed Purposes of the Parties in the
provision of services as between each of the Parties as outlined in the Management Agreement
between them and as set out in the residential long leases.
Examples of the services to be provided may include, but shall not be limited to:
Day to day property management and maintenance of the residential long leasehold
properties including inspections of those properties.
Collection of service charges.
Granting consent
Managing and maintaining the CCTV systems in the buildings
Dealing with complaints from leaseholders and adjoining landowners.
Dealing with assignments of leases, consents required under the leases, and the like;
Dealing with breaches of the terms of the residential long leases such as:
o Disrepair
o Non-payment of sums due
o Alterations carried out without consent
o Nuisance
o Dealing with all administrative and legal matters
2.5. The Parties agree that this Data Sharing Agreement formalises a lawful transfer of Personal Data
between them and presents no new or additional privacy concerns. A risk assessment has been
conducted in respect of the Personal Data to be shared and the necessity of the sharing; this Data
Sharing Agreement serves to address any residual privacy or information risks and document the
actions taken to identify, address and mitigate those risks wherever possible.
2.6. The Parties shall not process Shared Personal Data in a way that is incompatible with the Agreed
Purposes.
a) Identity Data includes first name, last name, maiden name, account reference, username or
similar identifier, marital status, title, date of birth and gender, signature, identity documents
(in particular proof of age, in relation to retirement properties, e.g. birth certificate/passport
etc.).
b) Contact Data includes billing address, delivery address, email address and telephone numbers.
c) Financial Data including account balances, sums, due, owed or outstanding pursuant to the
Contract (note, the Parties do not share bank account and payment card details).
4.2. The Shared Personal Data must not be irrelevant or excessive with regard to the Agreed Purposes.
5.2. For the Agreed Purposes as listed in clause 2.5 of this Data Sharing Agreement, each Party shall
ensure that it processes Shared Personal Data based on one of the following legal grounds:
c) of the legitimate interests pursued by the Controller or by a third party, except where such
interests are overridden by the interests or fundamental rights and freedoms of the data
subject which require protection of personal data.
5.3. Both Parties shall, in respect of Shared Personal Data, ensure that their privacy notices are clear and
provide sufficient information to Data Subjects in order for them to understand what of their
Personal Data the Parties are sharing, the circumstances in which it will be shared, the purposes for
the data sharing and either the identity with whom the data is shared or a description of the type of
organisation that will receive the Personal Data.
6. DATA QUALITY
6.1. Each Data Discloser shall take steps to ensure that Shared Personal Data is accurate.
6.2. Where a Party becomes aware of inaccuracies in Shared Personal Data, they will notify the other
Parties as soon as reasonably practicable.
7.2. The Parties shall maintain a record of Subject Access Requests, the decisions made and any
information that was exchanged. Records must include copies of the request for information, details
7.3. The Parties agree that the responsibility for complying with a Subject Access Request falls to Party
receiving the Subject Access Request in respect of the Personal Data held by that Party.
7.4. The Parties agree to provide reasonable and prompt assistance (within 5 Business Days of such a
request for assistance) as is necessary to each other to enable them to comply with Subject Access
Requests and to respond to any other queries or complaints from Data Subjects.
8.2. Notwithstanding clause 8.1, the Parties shall continue to retain Shared Personal Data in accordance
with any statutory or professional retention periods applicable in their respective countries and/or
industry.
8.3. Each Data Receiver shall ensure that any Shared Personal Data are returned to the relevant Data
Discloser or destroyed in the following circumstances:
b) on expiry of the Term (unless extended further to the terms of this Data Sharing Agreement);
c) once processing of the Shared Personal Data is no longer necessary for the purposes it was
originally shared for, as set out in clause 2.5.
9. TRANSFERS
9.1. For the purposes of this clause, transfers of personal data shall mean any sharing of Personal Data
by a Data Receiver with a third party, and shall include, but is not limited to, the following:
a) sharing of the Shared Personal Data with any other third party;
c) subcontracting the processing of Shared Personal Data to data processors located outside the
EEA; and
d) granting third parties located outside the EEA access rights to the Shared Personal Data.
9.2. No Data Receiver shall share the Shared Personal Data with a third party without the express written
permission of the relevant Data Discloser, unless that disclosure or sharing is required by law.
9.3. Where express written permission has been granted further to clause 9.2, a Data Receiver shall not
disclose or transfer Shared Personal Data outside the EEA without ensuring that adequate and
equivalent protections will be afforded to the Shared Personal Data.
10. SECURITY
10.1. Each Data Discloser shall be responsible for the security of the transmission of any Shared Personal
Data to a Data Receiver by using appropriate technical methods.
c) ensuring that staff use appropriate secure passwords for logging into systems or databases
containing the Personal Data;
d) ensuring that all IT equipment is protected by antivirus software, firewalls, passwords and
suitable encryption devices;
e) limiting access to relevant databases and systems to those of its officers, staff agents and sub-
contractors who need to have access to the Personal Data;
f) ensuring all staff handling Personal Data have been made aware of their responsibilities with
regards to handling of Personal Data;
g) Allowing for audits, inspections and assessments to be undertaken by the other Party in
respect of the security measures taken or producing evidence of those measures if requested;
and
h) The requesting party must give the other party reasonable notice, and the audit must be at
the requesting part own cost. Any audit shall be carried out during normal business hours.
11.2. Clause 11.1 also applies to any breaches of security which may compromise the security of the
Shared Personal Data.
11.3. The Parties agree to provide reasonable assistance as is necessary to each other to facilitate the
handling of any Data Security Breach in an expeditious and compliant manner.
12.2. In respect of breaches relating to this Data Sharing Agreement, the Parties shall abide by a decision
a) Process the Shared Personal Data in compliance with all applicable laws, enactments, regulations,
orders, standards and other similar instruments that apply to its personal data processing operations.
b) Make available upon request to the Data Subjects who are third party beneficiaries a copy of
this Data Sharing Agreement, unless the Clause contains confidential information.
c) Respond within a reasonable time and as far as reasonably possible to enquiries from the
relevant Data Protection Authority in relation to the Shared Personal Data.
d) Respond to Subject Access Requests in accordance with the terms of this Data Sharing
Agreement and in accordance with the GDPR.
e) Where applicable, maintain registration with all relevant Data Protection Authorities to
process all Shared Personal Data for the Agreed Purpose.
f) Take all appropriate steps to ensure compliance with the security measures set out in clause
10 above.
13.2. Each Data Discloser warrants and undertakes that it will ensure that the Shared Personal Data are
accurate.
13.3. Each Data Recipient warrants and undertakes that it will not disclose or transfer Shared Personal
Data to third parties either within or outside the European Economic Area (EEA) unless it complies
with the obligations set out in clauses 9.2 and 9.3 above.
14. INDEMNITY
14.1. This Clause 14 shall apply where the Client does not use the Manager
14.2 Within its scope of responsibility, the Client will set up its IT system in accordance with all applicable data
protection and data security requirements under the Data Protection Laws. The Client shall take and
maintain technical and organisational measures to ensure reasonable protection of any personal data
processed on its systems against misuse and loss in accordance with the requirements according to
applicable data protection laws. In particular, Party A shall take all appropriate technical and organisational
measures that comply with the requirements of Art. 32 GDPR in order to ensure a level of security
appropriate to the risk. The Client shall also assist the Manager in ensuring compliance with the obligations
pursuant to Art. 32 GDPR (Art. 28 para. 3 lit. c, f GDPR). This will include agreed documentation and IT
security concepts as prescribed by the Manager.
14.3 The Client shall indemnify the Manager and hold the Manager harmless from and against all liabilities, costs,
expenses, damages and losses (including but not limited to any direct, indirect or consequential losses, loss
of profit, loss of reputation and all interest, penalties, fines or other sanctions, and legal costs (calculated
on a full indemnity basis) and all other professional costs and expenses) suffered or incurred by the Manager
arising out of or in connection with any failure by the Client to comply with its obligation in Clause 14.2
above.