The delegation agreement must reflect the applicable mandatory requirements of the RGPD. Before you start verifying or creating the agreement, you need to define the data processing relationship between the parties, for example. B if the data is used in conjunction with the controller, processor controller or subprocessor processor or a combination of the computers above. The terms of the transfer and personal data are contained in Appendix B. The parties agree that Schedule B may contain confidential business information that it does not share with third parties, unless required by law or in response to a competent regulatory or government authority or in accordance with Clause I. The parties may make additional annexes to cover the additional deferrals that will be submitted to the Authority if necessary. Appendix B may, in the alternative, be drafted to cover several transfers. A DBA must be set up by a member of the research office`s contract team before the data is transmitted; b) to refer the dispute to the courts of the country where the data exporter is established. (f) “subcontractor”: any subcontractor that is activated by the data importer or any other subcontract of the data importer and agrees to obtain personal data from the data importer or other subcontractor intended exclusively for processing activities carried out on behalf of the data exporter after the transfer in accordance with its instructions. , the terms of the clauses and the terms of the written subcontracting; Transferred personal data is subject to the following essential processing activities: services and resources to businesses for the production, implementation, operation and management of premium programs on the following clauses, in order to provide appropriate safeguards regarding the protection of privacy and fundamental rights and freedoms of individuals with respect to the transfer , by the data exporter, from the personal data referred to in Schedule 1 to the data importer. (i) that, in the case of a subcontract in point 11, the processing activity is carried out by a subcontractor offering at least the same level of protection for personal data and the rights of the person concerned as the importer of data in accordance with the clauses; and the transmission of personal data to another processor is only permitted if certain conditions are applicable, as well as for transfers to a data processor outside the EEA.
Similarly, the transfer contract must define the legal basis for direct and indirect transfers as well as subsequent transfers. (g) make available to the person concerned, at his request, a copy of the clauses or an existing contract for sub-treatment, unless the clauses or contract contain commercial information, in which case they may withdraw this commercial information, with the exception of Appendix 2, which is replaced by a summary description of security measures in cases where the person concerned is unable to do so. Obtain a copy from the data exporter (d) “person concerned,” the person to whom certain personal data relates. The clauses are governed by the law of the country in which the data exporter is established. Under the RGPD, data transfer agreements for subcontractors (and subcontractors) must contain specific provisions and descriptions of the data, and in general, the obligations and rights of the processing manager should be taken into account in the agreement. These clauses are governed by the law of the country in which the data exporter is established, with the exception of laws and rules relating to the processing of personal data by the importer of data in accordance with Clause II, point h). The legal basis for transfers must be explicitly stated. This should include the reference to direct and indirect current transfers (if any) as well as the legal basis for transfers.