When different categories of personal data can be transferred within the group and these different categories are subject to different rules, it is particularly important to identify this data. If the transmission is carried out on a controller-to-processor basis or if the transmission is carried out under the standard contractual clauses under the standard contractual clauses, data identification is mandatory. Please complete the form below with an overview of the data processing activities within the Cubiks GroupData exporter. The data exporter is (please briefly indicate your activities relevant to the transfer) BCR is an attractive alternative for intragroup transmission agreements, and if CSC-based transfers are further examined, the benefits of BCR would only increase. In addition, global data protection programmes could benefit from BBCRs, not only as an „easier-to-drive“ data transfer vehicle, but also to improve operational efficiency and seek the regulatory benefits of the implemented compliance approach. Don`t ignore intergroup agreements on data protection. The applicable rules are the same as between third parties, the need for data processing agreements, data exchange agreements and, where appropriate, standard coverage clauses for limited transfers of personal data are required by the RGPD. First, where transfers are made on a supplier-to-subcontractor basis, section 28 clauses of the RGPD must be included in the contract. In summary, they grant the processing manager a wide range of rights with respect to personal data to the detriment of the subcontractor. 8 COOPERATION WITH SURVEILLANCE AUTHORITIES 8.1 The data exporter agrees to file a copy of this contract with the supervisory authority if it requests it or if such a deposit is required by the Data Protection Act 8.2 The contracting parties agree that the supervisory authority has the right to conduct a review of the data importer and a subcontractor that has the same scope and conditions as those that would apply one of the data.
Exporter in accordance with applicable data protection law.8.3 The data importer immediately informs the data importer of the existence of applicable legislation or any subprocessing that prevents the data importer or subcontractor from carrying out a check in accordance with paragraph 2. In this case, the data investigator has the authority to take the measures in point 5 (b). Binding Corporate Rules (BDR) should allow multinationals to transmit personal data from the European Economic Area (EEA) to their subsidiaries outside the EEA, in accordance with the RGPD. In this post, I confess the main ingredients for those who cook such an agreement in a small business context. 8. The data protection impact analysis and the pre-consultation subcontractor provide the company with appropriate support for all data protection impact assessments and prior consultations with supervisory authorities or other relevant data protection authorities that the company deems reasonably necessary under Articles 35 or 36 of the RGPD or the equivalent provisions of another data protection law. , in any event exclusively with regard to the company`s handling of personal data and taking into account the nature of the processing and data protection information. that are available to contract processors.