1 This requirement can be met if the subprocessor has co-signed the contract between the data exporter and the data importer under this decision. A person responsible for processing the subcontractor`s data transfer agreement must place the following address: (B) The company wishes to transfer certain services to the data processor that involve the processing of personal data. Obligation to terminate personal data processing services The specific obligations of the RGPD processors are described below and must be reflected in the agreement between the processor and the subcontractor. The terms of the transfer and personal data are contained in Appendix B. The parties agree that Schedule B may contain confidential business information that it does not share with third parties, unless required by law or in response to a competent regulatory or government authority or in accordance with Clause I. The parties may make additional annexes to cover the additional deferrals that will be submitted to the Authority if necessary. Appendix B may, in the alternative, be drafted to cover several transfers. In addition, the transport contract must reflect the fact that a subcontractor will do so: what must be included in the agreement depends on the use of a derogation, a de suitability decision or another transfer mechanism to legitimize the transfer of personal data. For some transmission mechanisms, it may be useful to include the mechanism in the agreement itself, for example. B when controller SSCs are used. They should also refer to other relevant agreements. The data exporter instructed the data importer to provide online services as described in the agreement.
Description of the technical and organizational security measures implemented by the data importer in accordance with points 4(d) and 5 (c) (or accompanying document/legislation): 1. The parties agree that if the provision of data processing services is terminated at the data exporter`s choice, the data importer and the subcontractor service provider return all personal data transmitted and copies to the data exporter, or destroy all personal data and confirm to the data exporter that it has done so, unless legislation imposed on the data importer prevents it from returning or partially destroying the transferred personal data.