Intra Group Data Protection Agreement

If you provide different sets of data processing rules, you need to indicate where and when the different sentences are applied. If you apply or apply more than one set of data processing rules to a given category, you can also indicate which priority rules are. Processing personal data for personal and evaluation purposes, supporting the recruitment, development and evaluation of staff in the processing group. Online assessments can be used for profiling to assess the suitability of candidates for a role. The ICO`s recent warning regarding intragroup data processing agreements is not isolated in this case. The data importer agrees and guarantees: (a) to process personal data only on behalf of the data exporter and in accordance with its instructions and clauses; if, for whatever reason, it cannot provide for such compliance, it undertakes to immediately inform the data exporter of its inability to comply, in which case the data exporter is allowed to suspend the transfer of data and/or terminate the contract;b) that it has no reason to believe that the applicable legislation prevents it; comply with the instructions received by the data exporter and its contractual obligations, and that, in the event of a change in this legislation that could have a significant negative effect on guarantees and obligations, it will immediately inform the data exporter of the change as soon as it becomes aware of it, in which case the data exporter is entitled to suspend the transmission of the data and/or terminate the contract;c) that it has implemented the technical and organisational security measures covered by Schedule B; before processing personal data transmitted will immediately inform the data exporter of the following information:i) any legally binding request from a law enforcement agency to disclose personal data, unless otherwise required. B a criminal prohibition to preserve the confidentiality of an investigation; (ii) random or unauthorized access; and (iii) to process without delay and formal any direct request from the persons concerned, without responding to that request, unless it is authorized to do so; (e) to process without delay and on a regular basis any request from the data exporter in relation to the processing of the personal data subject to the transfer, and to hold on to the supervisory authority`s board with respect to the processing of the data transmitted; (f) at the request of the data exporter; submit its processing services for the review of the processing activities covered by the clauses, carried out by the data exporter or by a supervisory body composed of independent members and holding the required professional qualifications, which are bound by a confidentiality obligation, if selected by the data exporter in accordance with the supervisory authority;g) make available to the person concerned, upon request, a copy of the clauses or an existing contract; unless the clauses or contract contain commercial information, they may withdraw this commercial information, with the exception of Schedule B, which is replaced by a summary description of security measures if the person concerned is unable to obtain a copy of the data exporter; (h) in the event of subcontracting, it has previously informed the data exporter and obtained prior written consent;i) that the subcontractor`s processing services be performed in accordance with point 11; and (j) to provide the data exporter with a copy of a subcontract that it enters into in accordance with the terms.

Posted in Uncategorized