Art. 28 of the EU General Data Protection Regulation (GDPR) regulates commissioned data processing (DP) and is mandatory to fulfil the accountability obligation under Art. 5 para. 2 GDPR.

A contract for commissioned processing (or commissioned data processing according to the "old" definition of the term) is always necessary if a third party comes into contact with the process when processing personal data.

Step 1: AV contract download and print (Appendix 1, Appendix 2)
Step 2: Page 1 and Page 5 fill in
Step 3: Contract from the managing director (or deputy) sign leave
Step 4: Save the contract as a pdf and add your company name to the file AV-Vertrag_GEBIOM_FIRMENNAME.pdf
Step 5: Send contract/file to
Contract by fax to 02519872422

"We have appointed a data protection officer for our company. You can contact our data protection officer via our postal address with the addition "the data protection officer" or via the following channels:

To the data protection officer
Phone: 0251/987240