Data Use And Confidentiality Agreement
Personal data is only processed to the extent necessary for the provision of the necessary services, i.e. the fulfillment of a job description or a request for assistance issued by the customer. Where the processor uses processors outside the EU/EEA area for the processing of personal data, such processing shall be carried out in accordance with the EU standard contractual clauses applicable to the transfer to third countries or any other legal basis expressly specified for the transfer of personal data to a third country. For the avoidability of doubt, the same applies when data is stored in the EU/EEA but can be accessed from sites outside the EU/EEA. If the Data Sharer has a non-FDP agreement, your auditor may need more information to implement the agreement. . . .