Common use of TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND Clause in Contracts

TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND. ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA Description of the technical and organisational measures implemented by the data importer(s) (including any relevant certifications) to ensure an appropriate level of security, taking into account the nature, scope, context and purpose of the processing, and the risks for the rights and freedoms of natural persons. The technical and organizational measures (including any certifications held by the data importer) as well as the scope and the extent of the assistance required to respond to data subjects’ requests, are described in Attachment 2 the DPA. For transfers to (sub-) processors, also describe the specific technical and organisational measures to be taken by the (sub-) processor to be able to provide assistance to the controller and, for transfers from a processor to a sub-processor, to the data exporter The technical and organisational measures that the data importer will impose on sub-processors are described in the DPA.

TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND. ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA Description of the technical and organisational measures implemented by the data importer(s) (including any relevant certifications) to ensure an appropriate level of security, taking into account the nature, scope, context and purpose of the processing, and the risks for the rights and freedoms of natural persons. The technical and organizational measures (including any certifications held by the data importer) as well as the scope and the extent of the assistance required to respond to data subjects’ requests, are described in Attachment 2 the DPA. For transfers to (sub-) processors, also describe the specific technical and organisational measures to be taken by the (sub-) processor to be able to provide assistance to the controller and, for transfers from a processor to a sub-processor, to the data exporter The technical and organisational measures that the data importer will impose on sub-processors are described in the DPA.. ANNEX III

TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND. ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA Description of the technical and organisational measures implemented by the data importer(s) (including any relevant certifications) to ensure an appropriate level of security, taking into account the nature, scope, context and purpose of the processing, and the risks for the rights and freedoms of natural persons. persons The technical and organizational measures (including any the certifications held by the data importer) as well as the scope and the extent of the assistance required to respond to data subjects’ requests, requests are described in Attachment 2 the DPAAddendum. For transfers to (sub-) processors, also describe the specific technical and organisational measures to be taken by the (sub-) processor to be able to provide assistance to the controller and, for transfers from a processor to a sub-processor, to the data exporter The technical and organisational measures that the data importer will impose on sub-processors are described in the DPA.Addendum. ANNEX III

TECHNICAL AND ORGANISATIONAL MEASURES INCLUDING TECHNICAL AND. ORGANISATIONAL MEASURES TO ENSURE THE SECURITY OF THE DATA Description of the technical and organisational measures implemented by the data importer(s) (including any relevant certifications) to ensure an appropriate level of security, taking into account the nature, scope, context and purpose of the processing, and the risks for the rights and freedoms of natural persons. persons The technical and organizational measures (including any the certifications held by the data importer) as well as the scope and the extent of the assistance required to respond to data subjects’ requests, are described in Attachment 2 the DPAAddendum. For transfers to (sub-) processors, also describe the specific technical and organisational measures to be taken by the (sub-) processor to be able to provide assistance to the controller and, for transfers from a processor to a sub-processor, to the data exporter exporter. The technical and organisational measures that the data importer will impose on sub-processors are described in the DPA.Addendum. ANNEX III