Data Processing Agreement Addendum

Here`s an excerpt from article 28 that addresses the needs of the data manager: for example, if you collect users` personal data on your website and then use a third-party processor to process an aspect of your business strategy, you want to know that this data processor works within the framework of RGPD compliance and does what it needs to do with your users` important data. "data protection legislation," any applicable data protection and data protection legislation, rules and guidelines relating to the protection of personal data, including, but not limited, regulation (EU) 2016/679 (the "General Data Protection Regulation" or the "RGPD"); and 3.2 subcontracting obligations. Mailchimp must: (i) enter into a written agreement with each subprocessor, including data protection obligations that provide at least the same level of customer data protection as that data protection authority, as this applies to the type of service provided by that subcontractor; and (ii) remain responsible for the subcontractor`s compliance with the obligations of this data protection officer and the acts or omissions of this subprocessor which have the effect of infringing one of its obligations under this data protection authority. Delete or return in case of termination. At the end or expiry of the contract, Mailchimp will delete (customer`s choice) all customer data (including copies) in its possession or under its control, or return it to the customer, unless this requirement does not apply, as current legislation requires Mailchimp to retain some or all of the customer`s data, or customer data that it has archived on warranty systems that securely isolate mailchimp customer data, protect it from further processing and, finally, erase it in accordance with Mailchimp`s deletion policies, unless required by law. 2.4.4. undertakes a written agreement with all applicable subcontractors and this agreement contains the same data protection obligations as those set out in the AP. Yva remains responsible for the compliance with the obligations set out in this section and for all acts or omissions of the subcontractors. The Client recognizes that Yva`s contractual obligations under this contract or parts of the cloud services are fulfilled by a subcontractor and accepts the use of subprocessings by Yva in accordance with dpa in order to meet its contractual obligations in accordance with the terms and conditions and to provide certain services on behalf of Yva. 11.2 The parties agree that this data protection authority will replace any existing data processing agreements or similar documents that the parties have previously entered into in relation to the service.