PARiConnect Terms and Conditions

Terms and Conditions of Use last updated: May 10, 2023

PAR may update or modify these Terms at any time. By continuing to use PARiConnect after such changes, you agree to be bound by the changes. You can tell when the Terms were last modified by viewing the "Last updated" date at the top. We encourage you to periodically review these Terms.

Additional Documents

General information

No clinical advice

Entity or organization use

All PAR Customers affiliated with or employed by an entity, group, business, or organization of any kind (an "Organization") must agree to the following:

• You represent and warrant that you have the authority to legally bind the Organization to these Terms;
• You acknowledge and agree that both you and the Organization are jointly and severally bound by these Terms;
• The term "Supervisor/Account Manager" shall mean you as the individual registering the account on behalf of the Organization; and
• All references in these Terms to "PAR Customer" or "you" will include both you and the Organization.

Individual use

PAR Customer responsibilities

Qualifications

Remote testing restrictions

Connectivity

Data retention and backup

Prohibited uses

Paper documentation

Indemnity obligation

Proprietary rights

Reservation of rights

Except for the limited License described above, you do not acquire any right, title, or interest in or to any intellectual property in PARiConnect or any assessment tools, information or other content contained within or available on or through PARiConnect. All rights not expressly granted to you by these Terms are reserved by PAR. Any access or use of PARiConnect except as expressly granted by these Terms is prohibited and may result in legal action.

Modification or termination

Maximum damage

Application of limitations and exclusions

Waiver of class action or class arbitration

PARiConnect Supervisor/Account Manager/User Agreement

Supervisor/Account Manager/User Agreement last updated: May 10, 2023

Business Associate Agreement

Business Associate obligations

1. If and to the extent and so long as required by the HIPAA provisions of 42 U.S.C. §§ 1171 et seq. and regulations promulgated thereunder, and any additional security requirements contained in Subtitle D of Title IV of the HITECH Act that apply to Customer, but not otherwise, PAR assures Customer that PAR will: a. implement appropriate safeguards, including, without limitation, administrative, physical, and technical safeguards and documentation satisfying the requirements of the Security Rule, to protect the confidentiality, integrity, and availability of any Client ePHI that it may indirectly receive, maintain, or transmit; and b. appropriately safeguard all Client PHI regardless of form or format.
2. PAR will mitigate, to the extent practicable, any harmful effect known to PAR of a use or disclosure of Client PHI by PAR in violation of this Agreement.
3. PAR will report to the Customer any use or disclosure of Client PHI not authorized in this Agreement or any security incident involving Client PHI of which PAR becomes aware.
4. PAR will ensure that any subcontractors or agents to whom PAR provides Client PHI agree to the same restrictions and conditions applicable to PAR with respect to such Client PHI.
5. PAR will make available Client PHI in accordance with applicable law.
6. PAR will provide Individuals who are the subject of Client PHI their rights as required of Business Associates.
7. PAR will maintain records pursuant to this Agreement and provide such records and other necessary information to the Customer or to the Secretary as requested or required in writing and as permitted by law. All records kept in connection with this Agreement will be subject to the Customer's review and audit upon reasonable notice and written request by the Customer.
8. On termination of this Agreement for any reason (see "Term and termination" below), PAR will destroy all Client PHI that PAR still maintains in any form (including all copies thereof), will not retain copies or files of such Client PHI, and will remain obligated not to use, disclose, or provide such Client PHI to third parties.
9. PAR shall incorporate any amendments or corrections to Client PHI when notified by the Customer pursuant to applicable law, in the event that the Customer cannot access such Client PHI.
10. "Unsecured PHI" has the meaning specified in § 17932 of the HITECH Act and 45 C.F.R. 164.402.

Permitted uses and disclosures

If PAR inadvertently obtains Client PHI, PAR may use or disclose such Client PHI only if such use or disclosure complies with all applicable requirements of 45 C.F.R. § 164.504(e). Specifically, and except as otherwise restricted by this Agreement:

1. PAR may use or disclose Client PHI to perform functions, activities, or services for, or on behalf of, the Customer, provided that any such use or disclosure (a) would not violate the Privacy or Security Rules if done by the Customer; and (b) is disclosed to both the Customer and Clients.
2. PAR may use or disclose Client PHI for PAR's proper management and administration or to carry out PAR's legal responsibilities only if and to the extent that (a) such use or disclosure is required by law; or (b) PAR obtains reasonable assurances from the person(s) to whom the Client PHI is disclosed ("Recipient") that such Client PHI will be maintained in confidence and used or further disclosed only for the purpose for which PAR disclosed to the Recipient or as required by law and that the Recipient will notify the Customer on learning of breach of confidentiality of such Client PHI.

De-identification/anonymization

The Customer agrees that PAR shall be entitled to de-identify and aggregate data provided to PAR for internal analytical purposes so long as PAR ensures that such data ("De-identified Aggregated Data") are effectively and irreversibly anonymized and de-identified prior to such internal use and that no individual will be identifiable from such data once anonymized and aggregated such that the De-identified Aggregated Data will not constitute "protected health information" or "individually identifiable health information" as defined by 45 C.F.R. §160.103. PAR may use De-identified Aggregated Data internally to improve our products and services. PAR has never and will never deliberately disclose Client ePHI to outside parties.

Application of civil and criminal penalties

1. PAR acknowledges that 42 U.S.C. §§ 1320d-5 and 1320d-6 shall apply to PAR if it violates any security provision specified above or §§ 1176 and 1177 of the Social Security Act in the same manner that such sections would apply to the Customer.
2. PAR will be subject to audit of its security measures by the Office of the Inspector General ("OIG") of DHHS.

Breach notification requirements

1. PAR recognizes that the Customer has certain reporting and disclosure obligations to the Secretary of DHHS and others, including affected Individuals, in case of a Breach of Unsecured Client PHI. If PAR discovers a Breach with respect to Unsecured Client PHI accessed, maintained, retained, modified, recorded, stored, destroyed, used, or disclosed by PAR, PAR will notify Customer of such Breach without unreasonable delay and in no event later than 60 days following PAR's discovery of the Breach. Such notice will include the identification of any Individual whose Unsecured Client PHI has been or is reasonably believed to have been accessed, acquired, or disclosed during the Breach.
2. PAR will be liable for the costs associated with any Breach caused by the negligent or willful acts or omissions of PAR or its agents, officers, employees, or subcontractors.

Insurance

1. PAR will maintain comprehensive general liability insurance throughout the Term (as defined below) of this Agreement in minimum limits of $1,000,000 USD per occurrence or per claim and $3,000,000 USD in the aggregate.
2. If PAR secures claims insurance coverage, it will purchase an unlimited reporting endorsement on the cancellation or termination of said coverage.
3. If requested, PAR will provide the Customer a certificate of insurance evidencing such coverage before the Effective Date (defined below) of this Agreement and any renewals thereof.

Business Associate indemnity

1. PAR will indemnify and hold the Customer and its directors, officers, agents, employees, and personnel (collectively "Indemnified Parties") harmless from and against all claims, demands, suits, losses, causes of action, or liability sustained by Indemnified Parties as a result of PAR's breach of this Agreement or the Customer's vicarious liability for any act or conduct of PAR adjudged to constitute fraud, misrepresentation, or violation of any law, statute, or regulation applicable to the conduct of PAR provided pursuant to this Agreement.
2. This indemnification will include reasonable expenses, including attorney's fees incurred by defending such claims; damages incurred because of PAR's failure to comply with applicable laws, ordinances, and regulations; or damages otherwise caused by PAR.

Document transmission

1. Transmission. Either Party may transmit documents (each a "Document") electronically to the other Party, either directly or through any third-party service provider with which either Party may contract. Either Party may modify its election to use, not use, or change a third-party service provider with 30 days' prior written notice to the other Party.
2. Costs of third-party service providers. Each Party shall be responsible for the costs of any third-party service provider with which it contracts unless otherwise set forth via written (i.e., e-mailed, faxed, or letter) communication between the Parties.
3. Liability for acts of third-party service providers. Each Party shall be liable for the acts or omissions of its third-party service provider while transmitting, receiving, storing, or handling Documents or performing related activities for, with, to, or from such Party, provided that, if both Parties use the same third-party service provider to effect the transmission and receipt of a Document, the originating Party shall be liable for the acts or omissions of such third-party service provider as to such Document.

System operations

Signatures

Each Party shall adopt as its signature ("Signature") an electronic identification consisting of symbol(s) or code(s) that are to be affixed to or contained in each Document transmitted by such Party. Each Party agrees that any Signature of such Party affixed to or contained in any transmitted Document shall be sufficient to verify that such Party originated such Document. Neither Party shall disclose to any unauthorized person the Signature of the other Party. Such Signature may be represented by the combination of the e-mail address and password of the Customer.

Proper receipt

No Document will be deemed to have been properly received or give rise to any obligation until accessible to the receiving Party at such Party's e-mail address as used for PARiConnect registration.

Verification

On proper receipt of any Document, the receiving Party shall promptly and properly transmit a functional acknowledgment in return. A functional acknowledgment shall constitute conclusive evidence that the receiving Party has properly received a Document.

Integrity

The Parties will take reasonable measures to protect the integrity of all Documents and data. Neither Party will insert any virus, key locks, or other programs into the system, regardless of whether a dispute exists between the Parties. The receiving Party will return all information in usable form on request or on termination of the Agreement.

Amendment

PAR may amend this Agreement from time to time to the extent required to ensure consistency with the provisions of 42 U.S.C. §§ 1171 et seq., HIPAA, the HITECH Act, and regulations promulgated thereunder.

Term and termination

1. This Agreement will be effective as of the date when the Agreement has been electronically accepted by the Customer ("Effective Date") and remain in effect (the "Term") until terminated as set forth below.
2. This Agreement may be terminated:
   1. On written notice by the Customer;
   2. By the Customer in the event of PAR's material breach of this Agreement, which has not been cured to the Customer's satisfaction, in the Customer's sole discretion, without penalty or recourse to the Customer and without limiting any other rights and remedies available to the Customer under this Agreement or applicable law;
   3. By PAR after 36 months of inactivity on the Customer's PARiConnect account, at which time PAR may presumptively determine that the Customer has terminated its use of PARiConnect.
3. On termination of this Agreement for any reason:
   1. PAR will delete all Customer data and return or destroy all Client PHI received or created on behalf of the Customer, including Client PHI that is in the possession of any PAR subcontractors or agents, and will retain no copies of the Client PHI, unless PAR determines that the return or destruction of any or all Client PHI is not feasible;
   2. If PAR determines that the return or destruction of any or all Client PHI is not feasible, PAR will so notify the Customer in writing. If the Parties mutually agree that such return or destruction is not feasible, PAR will extend the protections of this Agreement to, and limit further uses and disclosures of, such Client PHI to those purposes that make the return or destruction not feasible so long as PAR maintains the Client PHI.

Additional stipulations

This Agreement also contains a number of stipulations that are specific to the use of PARiConnect by the Customer ("Additional Stipulations"), which have been included in the PARiConnect Terms and Conditions of Use and/or additional disclosures contained in this Agreement. By accepting this Agreement, the Customer also agrees to be bound by the Additional Stipulations.

California Confidentiality of Medical Information Act Notice

You can find data breaches reported pursuant to California Civil Code § 1798.82 on the California Attorney General’s website at https://oag.ca.gov/privacy/databreach/list.

Data Processing Addendum

Data Processing Agreement last updated: May 10, 2023

1. Scope

1.1 The following Data Processing Addendum (“DPA”) applies to all transfers of Personal Information (defined below) by and between Psychological Assessment Resources, Inc., PARiConnect, PAR InVista, and/or the Self-Directed Search (collectively, “PAR,” “we,” “us,” or “our”) and any entities that provide the Personal Information of their patients, clients, students, or customers to PAR for PAR's provision of services (these entities are herein referred to as “Customer”). This DPA is effectively incorporated into the agreement (“Agreement”) entered into between PAR and Customer (each a “Party” and collectively the “Parties”). This DPA is effective as of the date of the Agreement. In the event of a conflict between any provisions of the Agreement and the provisions of this DPA, the provisions of this DPA shall govern and control.

1.2 PAR acknowledges that Customer and/or the data it discloses to PAR may be subject to consumer privacy laws and regulations, as well as common law restrictions and/or obligations (the “Consumer Privacy Laws”). Consumer Privacy Laws may include, but it is not limited to, laws, and associated regulations or guidance, such as pursuant to the Health Insurance Portability and Accountability Act, General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), U.K. General Data Protection Regulation, California Consumer Privacy Act (the “CCPA”) and California Privacy Rights Act (“CPRA”), as codified in California Civil Code sections 1798.100, et seq. (collectively, “CCPA/CPRA”), and other similar foreign or domestic, federal, state, or local privacy statutes, regulations, rules, or guidance, laws currently in effect or that may come into effect during the term of the Agreement, all as applicable and as may be amended from time to time.

2. Definitions

2.1 Based on Customer's relationship with PAR, PAR is considered a “service provider,” “contractor,” or “processor” (collectively, “Processor”) under the Consumer Privacy Laws. As a Processor, PAR may process and/or receive “personal information” or “personal data,” as such terms are defined in applicable Consumer Privacy Laws, from, or on behalf of, Customer (such personal information or personal data is herein referred to as “Personal Information”).

2.2 The term “security incident” means (i) any act or omission that compromises either the security, confidentiality, or integrity of Personal Information or the physical, technical, administrative, or organizational safeguards put in place by PAR that relate to the protection of the security, confidentiality, or integrity of Personal Information, or (ii) receipt of a complaint in relation to the privacy and data security practices of PAR or a breach or alleged breach of this DPA. Without limiting the foregoing, a compromise shall include any unauthorized access to or disclosure or acquisition of Personal Information.

2.3 The term “Model Clauses” means the Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.

2.4 The term “U.K. Addendum” means the template U.K. Information Commissioner's Office Addendum to the Model Clauses for international data transfers, issued under Section 119A of the U.K. Data Protection Act 2018, and including both tables and mandatory clauses.

3. PAR Commitments

3.1 PAR will comply with Customer's instructions regarding the processing of Personal Information, including but not limited to instructions regarding amending, transferring, or deleting Personal Information.

3.2 PAR shall not “sell” or “share” Personal Information it collects pursuant to the Agreement, as those terms are defined by applicable Consumer Privacy Laws.

3.3 Customer is providing PAR access to Personal Information for the limited and specific purposes provided in the Agreement, as described in section 5 herein, and/or as otherwise expressly permitted by Consumer Privacy Laws. PAR shall not retain, use, or disclose Personal Information for any purpose(s) other than those specified in section 5 herein or otherwise permitted by the Consumer Privacy Laws. Such purposes are incorporated by reference herein.

3.4 PAR shall not retain, use, or disclose Personal Information that it collects pursuant to the Agreement for any “commercial purpose,” as defined by applicable Consumer Privacy Laws, other than the business purposes specified in section 5 herein, including in the servicing of any entity other than Customer.

3.5 PAR shall not retain, use, or disclose Personal Information it collects pursuant to the Agreement outside of the direct business relationship between PAR and Customer.

3.6 PAR shall not combine or update Personal Information with any other information, except to perform a business purpose defined in Consumer Privacy Laws, such as regulations adopted pursuant to Cal. Civ. Code § 1798.185(a)(10), except as provided by Consumer Privacy Laws.

3.7 PAR shall comply with all applicable laws and obligations regarding the use and protection of Personal Information, including all Consumer Privacy Laws, as applicable. PAR certifies that it understands these restrictions, including pursuant to the CCPA/CPRA, and shall comply with them.

3.8 PAR shall provide the same level of privacy protection as required by Customer, and shall assist the Customer in meeting the Customer's obligations in relation to the Personal Information. These privacy protections and obligations include, but are not limited to:

1. Collecting and processing Personal Information solely to the extent the processing is necessary, reasonable, and proportionate to the specific purpose(s) listed in section 5 herein or otherwise permitted by Consumer Privacy Laws.
2. Cooperating with Customer in responding to and complying with consumer requests made pursuant to Consumer Privacy Laws. PAR shall without undue delay notify Customer, and provide Customer with copies, of all communications from, or requests made by (i) consumers in relation to their rights under any Consumer Privacy Laws; and (ii) any state or government regulators related to Personal Information.
3. Implementing reasonable security procedures and practices to protect the Personal Information from unauthorized or illegal processing, access, copying, storage, reproduction, display, loss, destruction, damage, use, modification, or disclosure in accordance with California Civil Code section 1798.81.5 and other Consumer Privacy Laws' similar requirements, including but not limited to technical and organizational measures appropriate to the nature of the Personal Information and risk to the same. PAR shall be responsible for implementing and maintaining such measures on systems PAR uses for processing Personal Information.
4. Providing notification of any security incident related to any system, platform, or process that PAR, its employees, agents, subprocessors, or representatives use to process Personal Information. PAR shall report any such security incident to Customer without undue delay. PAR shall follow Customer's instructions regarding security incidents to enable Customer to perform a thorough investigation into the incident, formulate a response, and take further steps in respect to the incident.

3.9 PAR shall ensure that each person processing Personal Information is subject to a duty of confidentiality with respect to such Personal Information. The termination or expiration of this DPA shall not discharge PAR from its confidentiality obligations pursuant to the Agreement and this paragraph. PAR shall process Personal Information until the date of expiration or termination of the Agreement, unless instructed otherwise by Customer, or until such data is returned, de-identified, or destroyed on instruction of Customer.

3.10 If PAR engages any other person or entity to assist it in processing Personal Information for purposes of providing the services enumerated in the Agreement, PAR shall:

1. Notify Customer of that proposed engagement in advance;
2. Provide Customer at least five (5) business days to object to such engagement; and
3. Ensure that the engagement complies with all Consumer Privacy Laws and is pursuant to a written contract binding such party to observe all material requirements regarding Personal Information and Customer's rights in relation to the same, as laid out herein. PAR remains responsible for any acts or omissions committed by itself, its representatives, agents, employees, officers, subcontractors, or any person or entity to which it or they provide access to Personal Information.

3.11To the extent PAR processes or receives any deidentified personal information, as defined by applicable Consumer Privacy Laws, from, or on behalf of, Customer (“Deidentified Information”), PAR shall comply with all Consumer Privacy Laws concerning the Deidentified Information, including maintaining the information as deidentified personal information. PAR shall take reasonable measures to ensure the Deidentified Information cannot be associated with a consumer or household, publicly commit to maintain and use the Deidentified Information in deidentified form, not attempt to reidentify the information unless solely for the purpose of determining whether the data is deidentified, and contractually obligate any recipient of the Deidentified Information to comply with this DPA and all Consumer Privacy Laws regarding the processing of such Deidentified Information.

3.12Unless PAR is otherwise required by law, or if Customer sooner requests PAR return Personal Information to Customer instead, PAR will delete and destroy Personal Information and all copies of the same once the Personal Information is no longer needed to complete the transaction or services requested.

3.13Upon the reasonable request of Customer, PAR shall make available to Customer all information in its possession, custody, or control that is necessary to demonstrate PAR's compliance with all Consumer Privacy Laws and the requirements of this DPA or to enable Customer to conduct and document any required data protection assessments.

3.14PAR shall notify Customer if PAR determines it can no longer meet its Consumer Privacy Laws obligations.

3.15To the extent PAR processes any Personal Information from the European Economic Area (“EEA”) or United Kingdom (“U.K.”), Customer as “data exporter” and PAR as “data importer” hereby enter into the Model Clauses and U.K. Addendum. If required by law or by any agency or regulatory body with jurisdiction, the Parties agree to re-execute the Model Clauses and U.K. Addendum (including Annexes hereto) as a document separate from this DPA. For purposes of the Model Clauses and U.K. Addendum, the Parties hereby agree that:

1. Module Two of the Model Clauses and the U.K. Addendum are incorporated by reference into this DPA.
2. Signatures applied to the Agreement will be taken as equally signing and effectuating the Model Clauses and U.K. Addendum where applicable to the underlying Personal Information processed by PAR.
3. Clause 7 and the optional provision in clause 11 of the Model Clauses are excluded.
4. With respect to clause 9 of the Model Clauses, the Parties select Option 2. The applicable time period for changes to the sub-processor list shall be at least five (5) business days' written notice prior to the engagement of the sub-processor. The list of sub-processors already authorized by Customer can be found at Annex III.
5. With respect to clause 17 of the Model Clauses, the Parties select Option 1 and the governing law is that of Ireland for Model Clause purposes and England and Wales for U.K. Addendum purposes.
6. With respect to clause 18 of the Model Clauses, the courts of Ireland shall resolve any disputes arising from the Model Clauses; the courts of England and Wales may resolve disputes arising from the U.K. Addendum.
7. If there is any conflict between the DPA and the Model Clauses and U.K. Addendum, the Model Clauses shall prevail to the extent applicable to the processing at issue. (h) The Parties agree to the U.K. Addendum Tables provided at Annex IV. 4.

4.Additional Rights and Obligations

4.2 PAR grants Customer the right, upon notice, to take reasonable and appropriate steps to stop, mitigate, and remediate any and all unauthorized use of Personal Information.

4.3 Customer is responsible for providing any required privacy notice to data subjects and securing any required consent for PAR's processing of Personal Information in accordance with Customer's instructions.

4.4 Customer agrees that PAR may aggregate data and use such data for analytical purposes. In those instances, PAR will ensure that the data is effectively anonymized prior to such use and that no individual is reasonably identifiable from the data once anonymized and aggregated.

4.5 PAR shall enable Customer to comply with any consumer privacy request made pursuant to Consumer Privacy Laws.

4.6 The parties will work and communicate with each other in good faith to comply with Consumer Privacy Laws.

1. From time to time, the parties may amend this DPA to clarify the understanding of the relationship of the parties and to clarify the obligations of each party with respect to current or future privacy laws. Such modifications are effective upon signature by all parties.
2. Upon the request of a Party (“Requesting Party”), either voluntarily or upon reasonable request, the other Party (“Receiving Party”) shall promptly provide to the Requesting Party relevant and accurate information to facilitate updates to the Requesting Party's privacy policy or other notice obligation under applicable Consumer Privacy Laws.

1. Separate and apart from any indemnification provided for in the Agreement, each party to this Agreement (an “Indemnifying Party”) will defend, indemnify and hold the other Party, its parent, subsidiaries and affiliates, and its current and former officers, directors, employees, contractors, agents and representatives (collectively, the “Indemnified Party”) harmless from and against any and all liabilities, losses, damages and costs, including reasonable attorneys' fees (collectively, “Losses”), resulting from a third party claim connected with (a) any breach by an Indemnifying Party of any commitment contained herein, (b) the failure by an Indemnifying Party or any of its agents, employees or subcontractors to perform its duties or obligations hereunder, or (c) the negligent, wilful, wrongful, or illegal acts or omissions of an Indemnifying Party or any of its agents, employees or subcontractors.
2. It will be an ongoing condition of the foregoing indemnity that the Indemnified Party give the Indemnifying Party prompt written notice of any actual or threatened claim, and provide the Indemnifying Party with all reasonably accessible information regarding such claims in the Indemnified Party's possession. The Indemnified Party will promptly notify the Indemnifying Party of any claim, demand, suit or proceeding for which the Indemnifying Party has agreed to indemnify and hold the Indemnified Party harmless, and the Indemnifying Party, upon written request by the Indemnified Party, will promptly defend and continue the defense of such claim, demand, suit or proceeding at the Indemnifying Party's expense. If the Indemnifying Party fails to undertake and continue such defense, the Indemnified Party will have the right (but not the obligation) to make and continue such defense as it considers appropriate, and the expenses and costs thereof, including but not limited to attorneys' fees, out-of-pocket expenses and the costs of an appeal and bond thereof, together with the amounts of any judgment rendered against the Indemnified Party, will be paid by the Indemnifying Party. The Indemnifying Party shall not enter into any settlement of an indemnified claim for which the Indemnified Party does not receive a general release without the prior written approval of the Indemnified Party. Nothing herein will prevent the Indemnified Party from defending, if it so desires in its own discretion, any such claim, demand, suit or proceeding at its own expense through its own counsel, notwithstanding that the defense thereof may have been undertaken by the Indemnifying Party.

EXCEPT WITH RESPECT TO EACH PARTY'S OBLIGATIONS AS TO CONFIDENTIALITY AND INDEMNIFICATION, OR LOSSES ARISING FROM A PARTY'S GROSS NEGLIGENCE OR WILLFUL MISCONDUCT:

1. UNDER NO CIRCUMSTANCES SHALL EITHER PARTY TO THIS AGREEMENT BE LIABLE FOR ANY CONSEQUENTIAL, INCIDENTAL, INDIRECT, EXEMPLARY, SPECIAL, OR PUNITIVE DAMAGES WHETHER ARISING OUT OF BREACH OF AGREEMENT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, REGARDLESS OF WHETHER SUCH DAMAGE WAS FORESEEABLE AND WHETHER OR NOT SUCH PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, AND NOTWITHSTANDING THE FAILURE OF ANY AGREED OR OTHER REMEDY OF ITS ESSENTIAL PURPOSE; AND
2. IN NO EVENT SHALL EITHER PARTY'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT, WHETHER ARISING OUT OF OR RELATED TO BREACH OF AGREEMENT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, EXCEED THE AMOUNT OF THE TOTAL FEES ACTUALLY PAID TO CONTRACTOR PURSUANT TO THIS AGREEMENT.

5.Description of Processing

1. Nature and Purpose of Processing. PAR processes Personal Information provided by individuals about themselves to provide psychological and career assessments used by individuals and/or their psychologists, career advisors, or similar professionals to evaluate, diagnose, or otherwise provide guidance or advice to the particular individual.
2. Type of Data Involved in Processing. This Agreement may involve the processing of the following types of Personal Information: name, demographic data, assessment responses, contact information, and medical information.

6.Disputes

MODEL CLAUSES ANNEX II

PARiConnect IT Controls

MODEL CLAUSES ANNEX III

Approved list of sub-processors

Infrastructure Sub-Processors

General Sub-Processors

Table 2: Selected SCCs, Modules and Selected Clauses