Data Processing Agreement Between Two Controllers

(C) The parties are working to implement a data processing agreement in line with the requirements of the current legal framework for data processing and the 2016/679 European Parliament and Council 27 April 2016 on the protection of individuals in the processing of personal data and the free movement of personal data and repealing Directive 95/46/EC (General Data Protection Regulation). 11.1 The subcontractor may not transfer or authorize the transfer of data to countries outside the EU and/or the European Economic Area (EEA) without the company`s prior written consent. When personal data processed under this agreement is transferred from a country within the European Economic Area to a country outside the European Economic Area, the parties ensure that personal data is adequately protected. To do so, contracting parties, unless otherwise agreed, rely on standard contractual clauses approved by the EU for the transfer of personal data. ☐ given the nature of the processing and the information available, the subcontractor assists the processing manager in carrying out his RGPD obligations with respect to processing security, notification of personal data breaches and data protection impact analyses; A subcontractor cannot support the services of a subprocessor without the express or written prior written permission of the processor. When authorization is granted, the subcontractor must enter into a contract with the subcontractor. The contractual terms of Article 28, paragraph 3, must provide a level of protection for personal data equivalent to that of the contract between the processing manager and the subcontractor. Transformers are responsible for processing compliance with the subprocessings they use. A luxury car company is working with a designer fashion brand to organize a promotional event with co-branding. Companies opt for a draw at the event. They invite participants to participate in the draw by typing their name and address into their draw system. After the event, the company awards the prizes to the winners.

You do not use personal data for other purposes. The agreement stipulates that the subcontractor may only process personal data in accordance with the documented instructions of the processing manager (including during the international transfer of personal data), except in cases where EU or contract law requires it.