|
3.7. Security and Data Privacy
<br /> 3.7.1. Security. GE shall use reasonable efforts to implement appropriate measures,in accordance with GE's standard security policies
<br /> applicable to the Hosted Services("Data Protection Plans")designed to secure Customer Content against accidental or unlawful loss,access,
<br /> or disclosure.GE reserves the right to modify Data Protection Plans from time to time upon notice to Customer.Customer consents to GE's
<br /> collection,use,and disclosure of information associated with the Hosted Services as described in this Agreement and the applicable Data
<br /> Protection Plan,and in particular to the processing of Customer's Content in, and the transfer of Customer Content into, any country in
<br /> which GE or its affiliates or subcontractors maintain facilities(including the United States). GE shall treat Customer contact information
<br /> (including business contact information of Customer representatives) in accordance with GE's Privacy Policy available at http://
<br /> www.ge.com/privacy.Customer consents to the disclosure of Customer Content to GE's subcontractors and Affiliates who agree to maintain
<br /> and use Customer Content in accordance with this Agreement.
<br /> 3.7.2. Regulated Data. If Customer Content includes any data subject to specific legal or regulatory requirements(including, but not
<br /> limited to,health care data,ELF personal data,export-controlled data,or sensitive government data),Customer shall notify GE in writing of
<br /> such requirements and provide any information that is necessary or reasonably requested by GE to determine the applicable regulatory
<br /> requirements. Except as may be specified by GE in writing, GE shall not have any responsibility to discover or provide a hosting
<br /> environment that complies with such regulatory requirements..Without limiting the generality of the foregoing,if Customer intends to use
<br /> the Hosted Services to process personal data of individuals located in the European Union,Customer shall notify GE in writing and the
<br /> parties will reasonably cooperate to comply with their respective obligations under the ELF General Data Protection Regulation.
<br /> 3.8. Customer's Responsibilities
<br /> 3.8.1. Customer Content and Equipment.Customer is solely responsible for the development,content,operation,maintenance,and use of
<br /> Customer Content and Customer equipment.Customer is responsible for securing all necessary rights and permissions to provide Customer
<br /> Content to GE and to use Customer Content with the Hosted Services.For example,Customer is solely responsible for:
<br /> a)the technical operation of Customer Content,including ensuring that calls Customer makes to or from any Customer application
<br /> or service are compatible with the Hosted Services;
<br /> b)compliance of Customer Content with the Acceptable Use Policy,Data Protection Plan,and applicable Service Documentation;
<br /> c) compliance by Customer with all applicable laws, executive orders, administrative rules and regulations, safety standards,
<br /> ordinances,and court orders in using the Hosted Services;
<br /> d)any third party claims relating to the legal status of Customer Content;
<br /> e)the operation,control,conditions,use,and maintenance of Customer equipment and ensuring that Customer's computer systems
<br /> and equipment meet the current technical requirements for the Hosted Services;
<br /> f)the accuracy,completeness,and timeliness of Customer Content;and
<br /> g)proper handling and processing of notices sent to Customer (or any of Customer's Affiliates) by any person claiming that
<br /> Customer Content violates such person's rights,including notices pursuant to the U.S.Digital Millennium Copyright Act or similar
<br /> laws of other countries.
<br /> 3.8.2. Customer Security.Customer is responsible for properly configuring and using the Hosted Services and taking Customer's own steps
<br /> to maintain appropriate security,integrity,and backup of Customer Content,which may include routine archiving of Customer Content and
<br /> the use of encryption technology to protect Customer's Content and credentials. Customer's credentials (which may include username,
<br /> passwords,tokens,certificates,keys,and pins)issued by GE or selected by Customer for accessing the Hosted Services are for Customer's
<br /> internal use only and Customer may not share or disclose them to any other entity or person,except that Customer may disclose Customer's
<br /> credentials to Customer's employees,agents,and subcontractors performing work on Customer's behalf("User").Customer is responsible
<br /> for any use of Customer's credentials and for notifying GE immediately of any breach of security related to Customer's credentials.
<br /> Customer is responsible for complying with the Data Protection Plan and all other security requirements published by GE or communicated
<br /> to Customer for securing Customer Content in connection with using the Hosted Services.Customer is deemed to have taken any action that
<br /> Customer permits, assists, or facilitates any User or other person or entity to take related to this Agreement, Customer Content, or the
<br /> Hosted Services.Customer shall not take any action to circumvent any security feature or attempt to exceed authorized access to the Hosted
<br /> Services or its related systems or networks; interfere with or disrupt the integrity or performance of the Hosted Services or the data
<br /> contained therein;or send or store material containing software viruses,worms,Trojan horses or other harmful computer code,files,scripts,
<br /> agents or programs. If Customer becomes aware of any violation of the foregoing by a User,Customer shall immediately terminate such
<br /> User's access to Customer's account and notify GE.
<br /> 3.8.3. Connectivity. Except as expressly provided in the Order, Customer is solely responsible for providing Internet connectivity for
<br /> Customer's facilities and Customer equipment as necessary to access and use the Hosted Services(including all ISP charges).GE does not
<br /> and cannot control the flow of data to or from the Hosted Services infrastructure and other portions of the Internet. Such flow depends in
<br /> large part on the performance of internet services provided or controlled by third parties. At times,actions or inactions of such third parties
<br /> can impair or disrupt Customer's connections to the Internet(or portions thereof).
<br /> 3.9. Third Party Services.If specified on GE's Web sites for the Hosted Services,third parties may offer independent services,including hosted
<br /> application services ("Third Party Services"), directly to Customer under a separate agreement, and Customer's acceptance of such offers will
<br /> constitute a separate agreement solely between Customer and the third party provider thereof. If Customer subscribes to Third Party Services,
<br /> Customer consents to GE sharing with the third party provider:(i)Customer contact and account information,(ii)Customer Content in connection
<br /> with Customer's use of the Third Party Services,and(iii)additional information,if any,disclosed in writing to Customer in connection with the Third
<br /> Party Services. GE shall have no warranty, support,maintenance,or other obligations or liability under this Agreement with respect to such Third
<br /> Party Services.
<br /> Page:55��of 15
<br /> GE CONFIDENTIAL GE DIGITAL GENERAL TIRj4I'3 AND CONDITIONS v3.0 AUGUST 2018
<br />
|