Art. 28 of the EU General Data Protection Regulation (GDPR) regulates commissioned data processing (DP) and is mandatory to fulfil the accountability obligation under Art. 5 para. 2 GDPR.
A contract for commissioned processing (or commissioned data processing according to the "old" definition of the term) is always necessary if a third party comes into contact with the process when processing personal data.
Step 1: AV contract download and print (Appendix 1, Appendix 2)
Step 2: Page 1 and Page 5 fill in
Step 3: Contract from the managing director (or deputy) sign leave
Step 4: Save the contract as a pdf and add your company name to the file AV-Vertrag_GEBIOM_FIRMENNAME.pdf
Step 5: Send contract/file to datenschutz@gebiom.com
or
Contract by fax to 02519872422
"We have appointed a data protection officer for our company. You can contact our data protection officer via our postal address with the addition "the data protection officer" or via the following channels:
To the data protection officer
Phone: 0251/987240
E-mail: Datenschutz@gebiom.com"