Whenever EventRinger processes Personal Data on behalf of Organizer, EventRinger shall:

2.1.1 Process Personal Data only on the documented instructions of Organizer, unless required to do otherwise by applicable law. EventRinger shall inform Organizer of the legal requirement before processing Personal Data other than in accordance with Organizer's instructions, unless that same law prohibits EventRinger from doing so on important grounds of public interest. Organizer will ensure that its instructions comply with all laws, regulations and rules applicable to the Personal Data, and that EventRinger’s processing of such Personal Data will not cause EventRinger to violate any applicable law, regulation or rule, including Data Protection Laws. EventRinger will notify Organizer, if in its opinion, an instruction is in breach of applicable Data Protection Laws. Organizer hereby instructs EventRinger, and EventRinger hereby agrees, to process Personal Data as necessary to perform EventRinger's obligations under the Agreement and for no other purpose, unless otherwise specified in this DPA or required to comply with the law or other binding governmental order. In the event that this DPA or any actions to be taken or contemplated in performance of this DPA do not or would not satisfy either party’s obligations under applicable Data Protection Laws, the parties shall negotiate in good faith upon an appropriate amendment to this DPA;

2.1.2 Comply with all applicable provisions of Data Protection Laws and provide the same level of protection for Personal Data as required of Organizer under Data Protection Laws.  EventRinger will process Personal Data only as necessary to perform EventRinger’s obligations under the Agreement, or as otherwise permitted by Data Protection Laws. Without limiting the foregoing, EventRinger will not (i) “sell” or “share” the Personal Data, as such terms are defined in the CCPA; (ii) EventRinger shall not retain, use, or disclose any such data outside of the direct business relationship between Organizer and EventRinger unless permitted by Data Protection Laws, or (iii) retain, use or disclose Personal Data for any purpose other than the business purposes specified in this DPA or otherwise permitted by Data Protection Laws.  EventRinger shall comply with any applicable restrictions under Data Protection Laws on combining Personal Data with personal data that EventRinger receives from, or on behalf of, another person or persons, or that EventRinger collects from any interaction between it and any individual.