1.1.4 „data protection laws“ means your data protection legislation and, where applicable, the data protection legislation of another country; (B) The company wishes to subcontract to the subcontractor certain services that involve the processing of personal data. 8. The data protection impact assessment and prior consultation processor shall provide the undertaking with appropriate assistance for all data protection impact assessments and prior consultations with supervisory or other competent data protection authorities that the undertaking deems reasonably necessary in accordance with Articles 35 or 36 of the GDPR or equivalent provisions of another Data Protection Act. in any case, only with regard to the processing of the company`s personal data by and taking into account the nature of the processing and the information available to the subcontractors. 11.1 The processor may not transfer or authorise the transfer of data to countries outside the EU and/or the European Economic Area (EEA) without the prior written consent of the company. Where personal data processed under this Agreement are transmitted by a country of the European Economic Area to a country outside the European Economic Area, the Parties shall ensure that the personal data are duly protected. To do this, the parties rely, unless otherwise agreed, on standard contractual clauses for the transfer of personal data approved by the EU. (C) The Parties shall endeavour to implement a data processing agreement in accordance with the requirements of the existing legal framework on data processing and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 to 24 April 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation). This data processing agreement is adapted from the ProtonMail DPA that you will find on this page. Organizations can use the document below as part of their GDPR compliance. The modalities of the transmission (as well as the personal data collected) are set out in Annex B, which forms an integral part of the clauses.
These clauses are governed by the law of the country in which the data exporter is established, with the exception of laws and regulations relating to the processing of personal data by the data importer, in accordance with clause II (h). 18.104.22.168 the transmission of personal data of the company of a subcontractor to a subcontractor or between two entities of a subcontractor, if such transfer was prohibited by data protection legislation (or by the terms of data transfer agreements concluded to address the data protection limitations of data protection legislation); The arrangements for transmission and personal data are set out in Annex B. The Parties agree that Annex B may contain confidential business information that they do not disclose to third parties, unless required by law, either in response to a competent regulatory or governmental authority or in accordance with clause I(s). The Parties may provide additional annexes to cover additional consignments that are submitted to the Authority if necessary. Alternatively, Annex B may be constructed to cover several transfers. The parties may amend these clauses only to update the information set out in Annex B; in that case, they shall inform the Authority if necessary. . . .