RHR is committed to complying with obligations applicable to RHR under applicable privacy and data protection laws, including to the extent applicable EU data protection laws. RHR shall comply with the then-current GDRP Regulation (EU) 2016/679 with respect to any personal data received under this Agreement.
Without limiting the foregoing obligation, RHR has implemented measures designed to:
(1) provide notice to individuals about its collection and use of their personal data, including through the Privacy Statement;
(2) use such personal data only for legitimate business purposes;
(3) provide means by which individuals may request to review, correct, update, suppress, restrict or delete or port their personal data, consistent with applicable law;
(4) require any service providers with whom personal data is shared to protect the confidentiality and security of such data;
(5) use technical and organizational measures to protect personal data within its organization against unauthorized or unlawful access, acquisition, use, disclosure, loss, or alteration.RHR will obtain all necessary rights and permissions prior to providing any personal data to RHR, including all rights and permissions required for RHR, RHR affiliates, and service providers to use and transfer the personal data to locations both within and outside the point of collection (including to the Montenegro) in accordance with GDRP’s privacy statement and applicable law. Notwithstanding any other provision, RHR may use an individual’s own personal data to the extent directed by, consented to or requested by such individual.
