Commissioned Data Processing Agreement

9.2 If, on a case-by-case basis, further necessary data protection checks or verifications are required by the contracting entity or by an independent external auditor mandated by the contracting entity, whose name is communicated in advance to the holder (e.g. The customer may verify once within 12 months, unless mandatory data protection legislation requires more frequent audits. If stricter arrangements have been agreed for the implementation of audits between the parties (Audit Directive), they must also be taken into account.

Share Post :