Is your company a processor as defined by the GDPR?
According to Article 4 No. 8 GDPR, a processor is an entity that processes personal data on behalf of the controller. Processing is always deemed to be commissioned if the service provider processes the data strictly in accordance with instructions. The following companies are examples of processors:
Is your company a processor as defined by the GDPR?
According to Article 4 No. 8 GDPR, a processor is an entity that processes personal data on behalf of the controller. Processing is always deemed to be commissioned if the service provider processes the data strictly in accordance with instructions. The following companies are examples of processors:
Find out at a glance why it is not that easy. In an exclusive comparison of the EuroPriSe Cert according to Article 42 GDPR and the popular ISO27701.
Find out at a glance why it is not that easy. In an exclusive comparison of the EuroPriSe Cert according to Article 42 GDPR and the popular ISO27701.
Your privacy. Your USP.
Your privacy.
Your USP.
Sichern Sie sich Ihren Wettbewerbsvorteil – Als einer der ersten Auftragsverarbeiter mit einer offiziell akkredierten Zertifizierung nach Artikel 42 DSGVO, die europaweit anerkannt ist
Sichern Sie sich Ihren Wettbewerbsvorteil – Als einer der ersten Auftragsverarbeiter mit einer offiziell akkredierten Zertifizierung nach Artikel 42 DSGVO, die europaweit anerkannt ist
With Germany's first officially accredited certification in accordance with the GDPR, you as a processor can prove your high data protection standards.
With Germany's first officially approved GDPR certification, you as a processor can prove your high data protection standards.
Appeal is the request of a certification client to the certification body to review a decision made by the certification body regarding the subject matter of the certification.
Appeals must be submitted by the certification client (appellant) using a corresponding form on the certification body's website (see below). The appellant receives an automated confirmation of receipt once the appeal has been successfully submitted.
Upon receipt of an objection, the certification body decides whether it is admissible (i.e. whether it relates to certification activities for which the certification body is responsible) and therefore whether its content must be examined and decided upon. As a rule, it informs the appellant of its decision on admissibility within ten working days of receiving the appeal.
The certification body shall ensure that the decision resolving the (admissible) objection is made or assessed and approved by persons who are not or were not involved in the certification activities to which the objection relates. These persons must meet the competence criteria defined by the certification body for the appeal function.
To ensure that there is no conflict of interest, certification body personnel who have provided consultancy services to a client within the last two years or who have been in an employment relationship with the client may not be used by the certification body to assess or approve the resolution of an objection from the client concerned.
The certification body is responsible for collecting and verifying all necessary information (as far as possible) in order to reach a decision on the objection. If necessary, the certification body may ask the objector to clarify the subject of the objection and provide further relevant information. The duration of this phase (determination and evaluation of all relevant information) depends on the degree of complexity of the respective objection.
If the objection is justified, the certification body shall take all necessary follow-up measures to resolve the objection.
The certification body formally informs the appellant of the result and conclusion of the appeal procedure.
In the event of justified objections, the certification body shall inform the competent data protection supervisory authority.
The certification body documents and tracks objections and the measures taken to resolve them.
Complaint is an expression of dissatisfaction with the activities of the certification body, which awaits a response and - unlike an objection - can be lodged with the certification body by any person or organization.
Complaints must be submitted by the complainant using a corresponding form on the certification body's website (see below). The complainant will receive an automated confirmation of receipt once the complaint has been successfully submitted.
Upon receipt of a complaint, the certification body decides whether it is admissible (i.e. whether it relates to certification activities for which the certification body is responsible) and must therefore be examined and resolved. As a rule, it informs the complainant of its decision on admissibility within ten working days of receiving the complaint.
The certification body shall ensure that the decision resolving the (admissible) complaint is made or assessed and approved by persons who are not or were not involved in the certification activities to which the complaint relates.
To ensure that there is no conflict of interest, certification body personnel who have provided consultancy services to a client within the last two years or who have been in an employment relationship with the client may not be used by the certification body to assess or approve the resolution of a complaint from the client concerned.
The certification body is responsible for collecting and verifying all necessary information (as far as possible) in order to reach a decision on the complaint. If necessary, the certification body may ask the complainant to clarify the subject matter of the complaint and provide further relevant information. The duration of this phase (identification and assessment of all relevant information) depends on the degree of complexity of the complaint in question.
If the complaint is justified, the certification body shall take all necessary follow-up measures to resolve the complaint.
Wherever possible, the certification body shall formally inform the complainant of the outcome and termination of the complaints procedure.
In the event of justified complaints, the certification body shall inform the competent data protection supervisory authority.
The certification body documents and tracks complaints and the measures taken to resolve them.
Appeal is the request of a certification client to the certification body to review a decision made by the certification body regarding the subject matter of the certification.
Appeals must be submitted by the certification client (appellant) using a corresponding form on the certification body's website (see below). The appellant receives an automated confirmation of receipt once the appeal has been successfully submitted.
Upon receipt of an objection, the certification body decides whether it is admissible (i.e. whether it relates to certification activities for which the certification body is responsible) and therefore whether its content must be examined and decided upon. As a rule, it informs the appellant of its decision on admissibility within ten working days of receiving the appeal.
The certification body shall ensure that the decision resolving the (admissible) objection is made or assessed and approved by persons who are not or were not involved in the certification activities to which the objection relates. These persons must meet the competence criteria defined by the certification body for the appeal function.
To ensure that there is no conflict of interest, certification body personnel who have provided consultancy services to a client within the last two years or who have been in an employment relationship with the client may not be used by the certification body to assess or approve the resolution of an objection from the client concerned.
The certification body is responsible for collecting and verifying all necessary information (as far as possible) in order to reach a decision on the objection. If necessary, the certification body may ask the objector to clarify the subject of the objection and provide further relevant information. The duration of this phase (determination and evaluation of all relevant information) depends on the degree of complexity of the respective objection.
If the objection is justified, the certification body shall take all necessary follow-up measures to resolve the objection.
The certification body formally informs the appellant of the result and conclusion of the appeal procedure.
In the event of justified objections, the certification body shall inform the competent data protection supervisory authority.
The certification body documents and tracks objections and the measures taken to resolve them.
Complaint is an expression of dissatisfaction with the activities of the certification body, which awaits a response and - unlike an objection - can be lodged with the certification body by any person or organization.
Complaints must be submitted by the complainant using a corresponding form on the certification body's website (see below). The complainant will receive an automated confirmation of receipt once the complaint has been successfully submitted.
Upon receipt of a complaint, the certification body decides whether it is admissible (i.e. whether it relates to certification activities for which the certification body is responsible) and must therefore be examined and resolved. As a rule, it informs the complainant of its decision on admissibility within ten working days of receiving the complaint.
The certification body shall ensure that the decision resolving the (admissible) complaint is made or assessed and approved by persons who are not or were not involved in the certification activities to which the complaint relates.
To ensure that there is no conflict of interest, certification body personnel who have provided consultancy services to a client within the last two years or who have been in an employment relationship with the client may not be used by the certification body to assess or approve the resolution of a complaint from the client concerned.
The certification body is responsible for collecting and verifying all necessary information (as far as possible) in order to reach a decision on the complaint. If necessary, the certification body may ask the complainant to clarify the subject matter of the complaint and provide further relevant information. The duration of this phase (identification and assessment of all relevant information) depends on the degree of complexity of the complaint in question.
If the complaint is justified, the certification body shall take all necessary follow-up measures to resolve the complaint.
Wherever possible, the certification body shall formally inform the complainant of the outcome and termination of the complaints procedure.
In the event of justified complaints, the certification body shall inform the competent data protection supervisory authority.
The certification body documents and tracks complaints and the measures taken to resolve them.
Yes. Since our accreditation as Germany's first company that is able to certify processors in accordance with Article 42 GDPR, we have focused exclusively on this.
The duration of certification varies between a few weeks and up to 12 months, depending on the size of the processor's company. We will be happy to provide you with an individual assessment in a non-binding initial meeting.
The certification is awarded for 3 years and can then be extended by recertification.
Yes. Since our accreditation as Germany's first company that is able to certify processors in accordance with Article 42 GDPR, we have focused exclusively on this.
The duration of certification varies between a few weeks and up to 12 months, depending on the size of the processor's company. We will be happy to provide you with an individual assessment in a non-binding initial meeting.
The certification is awarded for 3 years and can then be extended by recertification.
Germany's first certification for processors in accordance with Article 42 GDPR.
Germany's first certification for processors in accordance with Article 42 GDPR.
© All Rights Reserved.
© All Rights Reserved.