Agreement regarding Commissioned Data Processing

Additional processor means any data processor engaged by the Processor in the course of providing the services.

Agreement means this Agreement including its Annexes.

Ancillary services means services which are provided independently of the subject matter of this Agreement, such as telecommunications services, postal/transport services, maintenance and support services for users or the disposal of data storage media as well as other measures to ensure the confidentiality, availability, integrity and resilience of the hardware and software of data processing systems.

Annexe means any Annexe to this Agreement which shall constitute an integral part thereof.

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data protection laws means the European Union data protection laws and the data protection laws of another jurisdiction, where applicable.

EEA means the European Economic Area and comprises all the member states of the European Union, Liechtenstein, Norway and Iceland.

GDPR means Regulation (EU) Number 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data means any information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.

Services means any and all services provided by the Processor as agreed in the services agreement.

Services agreement means the agreement entered into by the parties for the provision of services by the Processor.