Data Processing
Addendum
This Data Processing Addendum ("DPA") forms part of the Master Services Agreement between HUK SONS IT and the Customer.
Subsidiary Disclosure: HUK SONS IT operates as a legally separate subsidiary of HUK SONS. When you engage with this site or our services, you are interacting with HUK SONS IT (a subsidiary of HUK SONS) as the contracting entity, unless a signed agreement specifies otherwise.
1. Definitions
"Controller", "Processor", "Data Subject", "Personal Data", "Processing" and appropriate technical and organizational measures shall have the meanings given to them in the GDPR.
2. Processing of Personal Data
HUK SONS IT shall process Personal Data only on documented instructions from the Customer, unless required to do so by Union or Member State law to which HUK SONS IT is subject.
The subject matter and duration of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects are set out in Appendix 1 to this DPA.
3. Security Measures
HUK SONS IT shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate: the pseudonymization and encryption of personal data; the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
4. Subprocessors
The Customer grants general authorization to HUK SONS IT to engage subprocessors. HUK SONS IT shall inform the Customer of any intended changes concerning the addition or replacement of other processors.
Execute this DPA
To execute this DPA, please download the PDF version, sign it, and return it to our legal team.