Third Party Data Processing Agreement

☐ the subcontractor must delete all personal data (at the choice of the processing manager) at the end of the contract or return it to the processing manager, and the subcontractor must also delete existing personal data, unless the law requires its storage; and the subcontractor processes personal data only on and in accordance with the instructions of the processor. The subcontractor does not process personal data without prior written agreement with the person in charge of the processing or without written instructions from the person in charge of processing beyond what is necessary to meet its obligations to the person in charge of the processing in accordance with the contract. (C) The parties are working to implement a data processing agreement in line with the requirements of the current legal framework for data processing and the 2016/679 European Parliament and Council 27 April 2016 on the protection of individuals in the processing of personal data and the free movement of personal data and repealing Directive 95/46/EC (General Data Protection Regulation). ☐ the subcontractor must ensure that data processing persons are subject to a duty of trust; The processing manager ensures and ensures that the description of the personal data and the categories of persons involved in this Schedule 1 are complete and correct, and guarantees the process of any errors and claims that may result from a breach of insurance and warranty. If your data processing violates compliance, mishandles data or is the victim of a data breach, a data processing agreement can legally protect you by proving that you have performed your due diligence to ensure that the company you worked with has followed the appropriate procedures. 8.1. When a person determines their data protection rights, the subcontractor sends the request to the processor and the processor processes the request. The subcontractor may inform the person concerned that the person in charge of the processing has been informed of his request. 1.3. All personal data processed on behalf of the processing manager remains the property of the person in charge of the treatment and/or the persons concerned.

The subcontractor is not allowed to keep a copy of the data provided by the data protection officer in any format, and all physical and logical access to that personal data or other data is removed. A subcontractor cannot support the services of a subprocessor without the express or written prior written permission of the processor.