Individual Data Privacy Policy For further information on how your data will be used, we invite you to carefully read the Data Protection and Privacy Policy: https://www.wearemci.com/en-ch/privacy-statement Group Data Privacy Policy The group leader agrees and warrants that: a. the personal data have been collected, processed and transferred and will continue to be collected, processed and transferred in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities); b. the transfer to, and processing by, MCI pursuant to this Agreement is not prohibited by a statutory or contractual duty of confidentiality; c. prior to any transfer of personal data, it has informed the data subjects and has complied with any notification and/or registration set forth by the applicable data protection law; in particular, the intended purposes of the collection, processing and transfer of personal data have been communicated to the data subjects; d. the data subjects are provided with their right of access, correction, blocking, suppression or deletion as available under applicable data protection law; e. it has taken and will take all reasonable measures to verify the correctness of the personal data and ensure that incorrect or incomplete personal data will be corrected, completed or destroyed prior any transfer of such data to MCI; f. it will inform MCI of any specific requirement from any data subject or any relevant authority on how personal data should be processed; g. it will inform without delay MCI of any request from any data subject or any relevant authority to rectify, update or delete any personal data; h. after assessment of the requirements of the applicable data protection law, it will ensure that the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where the processing or transfer involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation; i. it will provide MCI, when so requested, with copies of relevant data protection laws or references to them of the country in which the [group leader] is established; j. it will respond to enquiries from data subjects and authorities concerning processing of personal data by MCI; k. it will notify within 72 hours delay MCI of any actual, potential or alleged breach of the provision of this Clause; The group leader hereby commits with the present Data Protection and Privacy Policy: https://www.wearemci.com/en-ch/privacy-statement