157 / 499
8.2. Participating Employee Data
8.2.1 Each Participating Employee shall have sole ownership of all rights and
interest in all information or data that:
(i)
the Participating Employee provides to VRSCO under this
Agreement,
(ii)
the Participating Employee stores in or contributes to Retirement
Manager,
(iii) is stored in or, processed, transmitted, displayed, or reported by
Retirement Manager on that Participating Employee’s behalf,
(iv)
a Vendor provides to VRSCO on behalf of the Participating
Employee, or
(v)
is manipulated, modified, calculated, or retrieved by that
Participating Employee through the use of Retirement Manager.
The above information or data is collectively referred to in this Agreement
as the “
Participating Employee Data.
”
8.2.2 The Participating Employee Data shall include, but shall not be limited to,
the following data associated with each Participating Employee: names,
addresses, account balances, account numbers, account activity, Social
Security numbers, taxpayer identification numbers, and sensitive financial
information. The Participating Employee Data includes all information
(including personally identifiable information) derived from other
Participating Employee Data.
8.3. Use of Employer Data or Participating Employee Data by VRSCO and VRSCO
Users.
8.3.1 Unless expressly permitted by the express advance written consent of an
Employer official authorized to give such consent, VRSCO and its
employees, agents, and contractors, and other persons (other than
Vendors) associated with VRSCO (collectively, the “VRSCO Users”) are
only permitted to use, reuse, distribute, transmit, manipulate, copy,
modify, access, disclose, or redisclose the Employer Data or Participating
Employee Data to the extent necessary for VRSCO to perform the
Services and implement and maintain Retirement Manager as set forth in
this Agreement. VRSCO and the VRSCO Users shall hold the Employer
Data and Participating Employee Data in confidence and protect the
Employer Data and Participating Employee Data to the same extent and in
at least the same manner as Employer is required to protect its own data,
but in no case in a lesser manner than a reasonable degree of care under
the circumstances.
8.3.2 VRSCO will not permit the Employer Data or Participating Employee
Data to be used, reused, distributed, transmitted, manipulated, copied,
modified, accessed, disclosed, or redisclosed by VRSCO or any VRSCO
Users for the purposes of selling, trading, managing, marketing,
4