Privacy and Cookies Policy

it will keep Personal Data confidential and only process the Personal Data in accordance with and for the purposes set out in, instructions received from time to time (including entering into the Model Contract if requested) from the Client, persons acting on the Client's behalf or the Client's employees;

it has and will at all times during the term of this agreement have, appropriate technical and organisational measures in place acceptable to the Client to protect any Personal Data against unauthorised or unlawful processing and against accidental loss, destruction or damage. The It's GameTime Ltd further agrees and warrants that it will have taken all reasonable steps to ensure (i) the reliability of any of it's staff who will have access to Personal Data and (ii) that Personal Data will only be available to such staff members who need to have access to it and have been trained to a suitable standard for compliance with this Agreement and applicable laws;

it will allow the Client or its representative access to any relevant premises owned or controlled by the It's GameTime Ltd on reasonable notice to inspect the consultant’s procedures, including as described at (b) above and will, on the Client's request from time to time, prepare a report for the Client as to the ours then current technical and organisational measures used to protect any such Personal Data in compliance with GDPR;

it will consider all reasonable suggestions which the Client may put to the It's GameTime Ltd to ensure that the level of protection the Supplier provides for Personal Data is in accordance with these terms and the GDPR and the we will make changes suggested unless it can prove to the Client's reasonable satisfaction that these changes are not necessary to ensure ongoing compliance with the warranties contained in this Agreement;

it will ensure that the It's GameTime Ltd and any third parties it uses in accordance with this Agreement have appropriate privacy notices, consents and mechanics to deal with data subject’s rights and to process Personal Data in order to perform the services under the Agreement, in each case in accordance with the GDPR and all applicable laws;

it will deal promptly and properly with all enquiries from the Client relating to its processing or use of the Personal Data;

it will notify the Client forthwith if a legally binding request for disclosure of the Personal Data is made, or if the subject of any Personal Data ("Data Subject") makes a request for disclosure of the Personal Data or exercises any of a Data Subject's other rights under the GDPR in respect of his/her Personal Data; we will not respond to any such Data Subject request without the prior written consent of the Client;

it will notify the Client forthwith upon becoming aware of any breach of Personal Data, giving as much information as possible at the relevant time in compliance with article 33 of the GDPR;

it will, in any of the circumstances in (g) and (h) above or if the Client is required to deal with any assessment, enquiry, notice, investigation or Data Subject request under the GDPR (including articles 32 to 36), co-operate and provide assistance and information as requested by the Client to enable the Client to comply with all its obligations under the GDPR;

it will not sub-contract to any third party any of its obligations to process Personal Data on behalf of the Client unless (a) the we have provided to the Client such information as the Client may require to ascertain that such subcontractor is able to take appropriate technical and organisational measures against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data; (b) we have obtained the prior written consent of the Client; and (c) the proposed subcontractor has entered into a contract with the Client which includes substantially the same warranties as are contained in these sub clauses (a)-(i); and

on termination of this Agreement or at the earlier request of the Client, we will, at the choice of the Client, return all the Personal Data and copies thereof, whether or not in machine readable form, to the Client and/or destroy such Personal Data and certify to the Client that it has done so, unless legislation imposed on us prevents it from doing so. In that case, we warrant that we (i) will guarantee the confidentiality of the Personal Data and will not process or use it any more except as instructed by the Client, and (ii) will destroy the Personal Data within a reasonable time period after such legislation ceases to prevent such action.