5.1 Unless (i) we are required under any provision in the applicable national or international legislation and regulations, including professional rules and regulations, to disclose information, or (ii) we or persons affiliated with or working for us act in any disciplinary, civil, administrative or criminal proceedings in which this information may be of importance, we and the person(s) assigned by us shall neither disclose confidential information and personal data nor provide such information to third parties, other than those referred to in this clause 5. When undertaking our work we act in accordance with the local data protection laws.
5.2 You agree, within the scope of (i) an Engagement commissioned by you to us, (ii) compliance with statutory obligations to which we are subject, (iii) risk management and quality review requirements, and (iv) internal business purposes, that we shall process confidential information and personal data concerning you and/or persons (formerly) working for, or affiliated with, you, your clients or third parties, including sharing this information with the following on a need to know basis:
- the firm’s teams other than those involved in the performance of the Engagement;
- parties involved in the execution of the Engagement;
- subcontractors and IT service providers;
- third parties experts to supplement our services; or
- our insurers, or legal or financial advisers.
5.3 You agree that we may use (confidential) information and personal data provided by or on behalf of you - provided it is anonymous and that identity cannot be derived from it –within the framework of, amongst other things, compiling and maintaining best practices, statistics, research purposes and/or benchmarking.
5.4 For the purposes described in this clause 5, we may transmit personal data to countries outside of the JURISDICTION_COUNTRY if the recipient is deemed to offer a sufficient level of protection based on the data protection law.
5.5 We shall take appropriate measures in order to protect the confidential information and personal data and shall inform any third parties and employees that we engage of the confidential nature of the information.
5.6 We shall process personal data in accordance with the applicable national or international legislation and regulations, including professional rules and regulations, in the field of protection of personal data.
5.7 Except where any national or international legislation or regulations, including professional rules and regulations, require you to disclose information, or except where we have given our prior written consent, you shall not disclose, or provide to third parties, any information concerning the Engagement, the content of reports, opinions or any other written or oral statements issued by us.
5.8 The parties shall impose their obligations under this clause on any third parties that they engage.
5.9 We shall have the right to mention your name and sketch a broad outline of the services provided to potential and existing clients as an illustration of our experience.
5.10 To support our business operation we have the right to use Cloud services.