Use of other processors. The use of further processors by the processor is only permissible if the person responsible has expressly agreed to this. Consent must be given in writing. In this case, the processor must transfer all obligations from this agreement, including this entire point 5, to the other processor (subcontractor) by written agreement, with sufficient guarantees in particular that the appropriate technical and organizational measures must be carried out in such a way that that processing takes place in accordance with the requirements of the GDPR. If the subcontractor does not comply with their data protection obligation, the processor responsible for the compliance is liable for said subcontractor. Subcontractors that were visibly disclosed before or at the time of signing the contract and thus fulfill the requirements, are approved when signing this agreement.
Appears in 2 contracts
Sources: Data Processing Agreement, Data Processing Agreement