Definitions (1)
a breach of security leading to the accidental or Unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Microsoft Personal Data or Microsoft Confidential Data transmitted, stored or otherwise Processed by Supplier or its Subcontractors
Data Incident
the entity that determines the purposes and means of the Processing of Personal Data
Controller
small text files stored on devices by websites and/or applications that contain information used to recognize a Data Subject or a device
Cookies
the right to access, delete, edit, export, restrict, or object to Processing
Data Subject Rights
an entity that processes Personal Data on behalf of another entity
Processor
a third-party to whom supplier delegates its obligations in connection with the contract covering their Performance, including a supplier affiliate not contracting directly with Microsoft
Subcontractor
any operation or set of operations which is performed on any Microsoft Personal Data or Confidential Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction
Process
any Personal Data Processed by or on behalf of Microsoft
Microsoft Personal Data
any information which, if compromised through confidentiality or integrity means, can result in significant reputational or financial loss for Microsoft. This includes Microsoft hardware and software products, internal line-of-business applications, pre-release marketing materials, product license keys, and technical documentations related to Microsoft products and services
Microsoft Confidential Data
a third party that Microsoft engages to Perform, where the Performance includes Processing of Microsoft Personal Data for which Microsoft is a Processor
Subprocessor
security vulnerability related to Supplier’s handling of Microsoft Personal Data or Microsoft Confidential Data
Data Incident
an identifiable natural person who can be identified, directly or indirectly, in particular by referencing an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Data Subject