above will be collected, processed and used by the Processor under this Data Processing Agreement: Employees (Internal) Customers Contact persons Employees of external companies Interested parties Tenants / landlords, lessees / lessors Suppliers Technical and organisational measures based on the EU General Data Protection Regulation The Processor documents the implementation of the technical and organizational measures in accordance with the requirements of the GDPR. The Processor ensures in particular that it has implemented the appropriate measures to: Prevent unauthorized persons from gaining access to data processing systems with which personal data are processed or used; Prevent data processing systems from being used without authorization; Ensure that persons entitled to use a data processing system have access only to the Personal Data to which they have a right of access, and that personal data cannot be read, copied, modified or removed without authorization during processing or use and after storage; Ensure that personal data cannot be read, copied, modified or removed without authorization during electronic transmission or transport, and that it is impossible to check and establish to which bodies the transfer of personal data by means of data transmission facilities is envisaged; Ensure that it is possible to check and establish whether and by whom personal data has been input into data processing systems, modified or removed; Ensure that, for commissioned processing of personal data, the Personal Data is processed strictly in accordance with the instructions of the Controller (job control). Ensuring the availability of services as described and in accordance with Appendix 1 Ensuring the separation of processing as described and in accordance with Appendix 1 Significant changes of the above technical and organisational measures by the Processor shall be agreed by the Parties in writing. The Processor agrees and warrants that the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the Personal Data to be protected having regard to the state of the art and the cost of their implementation. The Processor further agrees and warrants that the processing of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law and does not violate the relevant provisions.
above will be collected, processed and used by the Processor under this Data Processing Agreement: Employees (Internal) Customers Contact persons Employees of external companies Interested parties Tenants / landlords, lessees / lessors Suppliers Technical and organisational measures based on the EU General Data Protection Regulation The Processor documents the implementation of the technical and organizational measures in accordance with the requirements of the GDPR. The Processor ensures in particular that it has implemented the appropriate measures to: Prevent unauthorized persons from gaining access to data processing systems with which personal data are processed or used; Prevent data processing systems from being used without authorization; Ensure that persons entitled to use a data processing system have access only to the Personal Data to which they have a right of access, and that personal data cannot be read, copied, modified or removed without authorization during processing or use and after storage; Ensure that personal data cannot be read, copied, modified or removed without authorization during electronic transmission or transport, and that it is impossible to check and establish to which bodies the transfer of personal data by means of data transmission facilities is envisaged; Ensure that it is possible to check and establish whether and by whom personal data has been input into data processing systems, modified or removed; Ensure that, for commissioned processing of personal data, the Personal Data is processed strictly in accordance with the instructions of the Controller (job control). Ensuring the availability of services as described and in accordance with Appendix 1 Ensuring the separation of processing as described and in accordance with Appendix 1 Significant changes of the above technical and organisational measures by the Processor shall be agreed by the Parties in writing. The Processor agrees and warrants that the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the Personal Data to be protected having regard to the state of the art and the cost of their implementation. The Processor further agrees and warrants that the processing of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law and does not violate the relevant provisions.