Source: https://eventsbydesign.nl/Privacy-Beleid/Verwerkingsovereenkomst-met-Strato/
Timestamp: 2018-11-15 11:07:08
Document Index: 564087018

Matched Legal Cases: ['Art. 4', '§ 88', '§ 203', 'Art. 32', 'Art. 33', 'Art. 32']

Events By Design - Evenementenbureau - home - Verwerkingsovereenkomst met Strato
for customer number [75001083]
Diana, Beekema / Events By Design
- hereinafter referred to as the processor –
4.1. The client is solely responsible for complying with the legal requirements of data protection laws, in particular, the legality of the transfer of data to the processor and the legality of data processing under this Agreement ( "Responsible" in the sense of Art. 4 no. 7 GDPR). This also applies to the purposes and means of processing set out in this Agreement.
4.5. The parties further agree that the processor is entitled to transfer personal data - in compliance with the mandatory provisions for the provision of services in a third country. This is particularly the case if the subject of the Contract is the service of a third party providing this service wholly or partly in a third country.
5.4. The processor ensures that the employees involved in the processing of the data of the client and other persons acting on behalf of the processor are prohibited from processing the data outside the instruction issued. Furthermore, the processor ensures that persons authorised to process the personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality. The same applies to the secrecy of telecommunications according to § 88 TKG (German Telecommunications Act) and - in knowledge of criminal liability - for the preservation of secrets of professional secrecy according to § 203 StGB (German Penal Code). The obligation of confidentiality/secrecy persists even after the order has been completed.
7.1. The processor will take appropriate technical and organisational measures in its area of ​​responsibility to ensure that the processing is carried out in accordance with the requirements of the GDPR and ensure the protection of the rights and freedoms of the data subjects. In accordance with Art. 32 GDPR, the processor shall take appropriate technical and organisational measures to ensure the confidentiality, integrity, availability and resilience of the processing systems and services in the long term.
8.3. The client's inspection right has the objective of verifying compliance with the obligations incumbent on a processor in accordance with the GDPR and this Contract. Proof of compliance with these obligations is provided by the certification referred to in the preceding paragraph. Insofar as the client asserts legitimate doubts on the basis of factual indications that these certifications are sufficient or appropriate, or if special incidents within the meaning of Art. 33 (1) GDPR in connection with the execution of the data processing on behalf of the client justify this for the client, it may perform inspections. These can be carried out during normal business hours without disruption to the operation after registration, taking into account a reasonable lead time.
9.5. If the processor places orders with other processors, it is the processor's responsibility to impose its data protection obligations under this Contract to the other processor.
11.5. If the data of the client is endangered by seizure or confiscation, by a bankruptcy or settlement procedure, or by other events or measures of third parties, the processor shall inform the client immediately. The processor will inform all persons responsible in this connection without delay that the sovereignty and the ownership of the data lie exclusively with the client as the "responsible party" within the meaning of the GDPR.
Appendix 1 to the Data Processing Agreement - Approved subprocessors/additional processors
Development and maintenance of the website builder
Development and maintenance of the webshops
Development and maintenance of the communicator
Development and operation of the STRATO online accounting tool
Operation and support of the STRATO online accounting tool
Appendix 2 to the Data Processing Agreement - Technical and organisational security measures according to Art. 32 GDPR
3.2 Disaster Recovery - Rapid recovery after incident (Article 32 (1) (c) GDPR)
Je hebt op 11-05-2018 een verwerkersovereenkomst afgesloten met STRATO.