Common use of Monitoring rights of the Controller Clause in Contracts

Monitoring rights of the Controller. The Processor agrees that the Controller or a person commissioned by the Controller shall be entitled to monitor compliance with the provisions on data protection and the contractual agreements to the necessary extent, in particular by obtaining information and requesting relevant documents or access to the Processor's offices during the designated business hours after prior notification. Appropriate and valid IT security certificates (e.g. IT-Grundschutz, ISO 27001) can also provide proof of proper processing, provided that the respective object of the certification also applies to data processing on behalf in a specific case. However, providing a relevant certificate does not waive the obligation of the Processor to document the security measures within the meaning of Section 3 of this Agreement.