92x
001627
2021-02-25

Controlling and Information Rights

7.1
The contractor shall provide the client with any information required to prove adherence to the obligations stated in Art. 28 of GDPR, and shall enable audits performed by the client or an auditor they commissioned to the extent required. If in the process there is a possibility to acquire confidential information, the contractor shall be entitled to demand a declaration of confidentiality from the client or the commissioned auditor.

If the client claims reasonable doubts based on factual indications, the client's data protection officer and/or the auditor commissioned by them shall have the right to enter the premises of the contractor following written notice of generally 14 calendar days prior, to convince themselves that the relevant lawful and contractual data protection regulations are complied with. In this regard, the contractor shall provide the required access rights, rights to information, and rights of inspection to the client's data protection officer and/or third parties commissioned by them.

To enable audits by the client, the contractor shall be entitled to make an appropriate claim for remuneration.

7.2
Before beginning the processing, the contractor shall inform the client in writing if and how they have implemented the measures stipulated in Clauses 3.2 trough 3.6 of this DP Agreement.