Sub Processing Agreement Gdpr
☐ given the nature of the processing and the information available, the subcontractor assists the processing manager in carrying out his RGPD obligations with respect to processing security, notification of personal data breaches and data protection impact analyses; (e) purpose of treatment: Mailchimp only processes customer data for authorized purposes: (i) processing, to the extent necessary to provide the service in accordance with the agreement; (ii) the treatment initiated by the customer when using the service; and (iii) processing to satisfy all other appropriate customer instructions (e.g. B by e-mail or service ticket) that comply with the terms of the agreement. 3.1.2 Wolters Kluwer and anyone authorized to work on its behalf undertakes to process personal data only in accordance with the documented instructions of the persons responsible for the processing, unless Wolters Kluwer is required to process personal data in accordance with swedish or European law. In this case, Wolters Kluwer will inform the client of this obligation before the start of treatment, as far as the current rules allow. The client must then inform those responsible for the treatment of this obligation. Each party ensures that the other party has the right to process the contact information and other personal data of its staff if and to the extent necessary to facilitate the delivery of the service. 8.1 This sub-treatment contract applies as long as Wolters Kluwer processes personal data on behalf of those responsible for processing under this sub-treatment contract. The customer is responsible for immediately notifying Wolters Kluwer if the contract between the customer and a processing manager has been terminated and if the personal data processed by Wolters Kluwer on behalf of the data holder is deleted by Wolters Kluwer. Given the complexity of the task, it is advisable to have a data processing agreement as a separate document. 2.1 “agreement,” the agreement between the parties, which includes the content of the CGVs, this sub-treatment agreement, as well as any other agreement that may be reached between the contracting parties regarding the customer`s use of the service. (b) that it ordered the data importer and, for the duration of the data processing services, that it process the personal data transmitted only on behalf of the data exporter and in accordance with applicable data protection legislation and clauses; This data processing agreement is adapted by the DPA De ProtonMail which is on this page.
Organizations can use the following document as part of their compliance with the RGPD. In accordance with Article 28, paragraph 3, point h), the agreement provides: (c) that it has implemented the technical and organisational security measures covered by Appendix 2 prior to the processing of personal data transmitted; The agreement stipulates that the subcontractor may only process personal data in accordance with the documented instructions of the processing manager (including during the international transfer of personal data), except in cases where EU or contract law requires it.