{"id":9967,"date":"2021-04-27T11:58:51","date_gmt":"2021-04-27T09:58:51","guid":{"rendered":"https:\/\/www.robin-data.io\/?p=9967"},"modified":"2025-04-22T09:39:28","modified_gmt":"2025-04-22T07:39:28","slug":"gdpr-compliant-data-processing-agreement","status":"publish","type":"post","link":"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement","title":{"rendered":"Create a GDPR-compliant data processing agreement"},"content":{"rendered":"<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-tdqx0v-4dfa325305dad175a83f380d1ee01b8c\">\n.flex_column.av-tdqx0v-4dfa325305dad175a83f380d1ee01b8c{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-tdqx0v-4dfa325305dad175a83f380d1ee01b8c av_one_full  avia-builder-el-0  el_before_av_one_full  avia-builder-el-first  first flex_column_div av-zero-column-padding'     ><p><section  class='av_textblock_section av-kr4n0ncw-060dc0a11c7323453da62b82e0b3f523'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\">Data Protection Academy<\/a> \u00bb <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\">Data Protection Wiki<\/a> \u00bb <strong>Data processing agreement<\/strong><\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-knztaxkq-1affc4164832f13534c02669b2cd3d04\">\n.avia-image-container.av-knztaxkq-1affc4164832f13534c02669b2cd3d04 img.avia_image{\nbox-shadow:none;\n}\n.avia-image-container.av-knztaxkq-1affc4164832f13534c02669b2cd3d04 .av-image-caption-overlay-center{\ncolor:#ffffff;\n}\n<\/style>\n<div  class='avia-image-container av-knztaxkq-1affc4164832f13534c02669b2cd3d04 av-styling- avia-align-left  avia-builder-el-2  el_after_av_textblock  el_before_av_hr'   itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" ><div class=\"avia-image-container-inner\"><div class=\"avia-image-overlay-wrap\"><img decoding=\"async\" loading=\"lazy\" class='wp-image-14057 avia-img-lazy-loading-14057 avia_image' src=\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg\" alt='Two data protection officers draw up a data processing agreement' title='Two data protection officers draw up a data processing agreement'  height=\"343\" width=\"685\"  itemprop=\"thumbnailUrl\" srcset=\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg 685w, https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten-300x150.jpg 300w, https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten-18x9.jpg 18w\" sizes=\"auto, (max-width: 685px) 100vw, 685px\" \/><\/div><\/div><\/div><br \/>\n<div  class='hr av-s3oly7-57d55fdd954a283ae8991f71259ab6a9 hr-default  avia-builder-el-3  el_after_av_image  el_before_av_heading'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-5zl9u7-0b6bee6d6f9936afb1d60d2125331b3e\">\n#top .av-special-heading.av-5zl9u7-0b6bee6d6f9936afb1d60d2125331b3e{\npadding-bottom:10px;\ncolor:#303440;\n}\nbody .av-special-heading.av-5zl9u7-0b6bee6d6f9936afb1d60d2125331b3e .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-5zl9u7-0b6bee6d6f9936afb1d60d2125331b3e .special-heading-inner-border{\nborder-color:#303440;\n}\n.av-special-heading.av-5zl9u7-0b6bee6d6f9936afb1d60d2125331b3e .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-5zl9u7-0b6bee6d6f9936afb1d60d2125331b3e av-special-heading-h1 custom-color-heading blockquote modern-quote  avia-builder-el-4  el_after_av_hr  el_before_av_textblock'><h1 class='av-special-heading-tag'  itemprop=\"headline\"  >GDPR compliant data processing agreement<\/h1><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-p8trhb-3057b7a5b411aa9d990a15f32edd1d88'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>If personal data is processed by an external service provider on behalf of your company, you as the client and the external service provider as the contractor must conclude a separate contract. This contract regulates under which conditions the processing of personal data may take place.<\/p>\n<p>Classic examples of commissioned processing are the use of the services of external data centres, software providers or even lettershops for marketing measures. But is there actually a difference between the commissioned data processing agreement and the data processing agreement? What information must such a contract contain in order to meet the requirements of the GDPR?<\/p>\n<p>In the following article, we explain how you can create data processing agreements in compliance with the GDPR.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-4s824v-7605a0d58a71a5f5737e5f64157d52a6\">\n#top .av-special-heading.av-4s824v-7605a0d58a71a5f5737e5f64157d52a6{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-4s824v-7605a0d58a71a5f5737e5f64157d52a6 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-4s824v-7605a0d58a71a5f5737e5f64157d52a6 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-4s824v-7605a0d58a71a5f5737e5f64157d52a6 av-special-heading-h2 blockquote modern-quote  avia-builder-el-6  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Most important information on data processing and data processing agreements<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-ncnmpr-186e6c78a22deba47c323e1d13f8843b'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><ul>\n<li>When personal data are processed by external companies, processing is carried out; however, not every transfer of data constitutes processing (e.g. to tax advisors, banks, etc.).<\/li>\n<li>As a consequence of an data processing, a data processing agreement is necessary, which shows the rights and obligations of the client and the contractor.<\/li>\n<li>A missing or inadequately drafted data processing agreement can be punished with heavy fines, with the processor also being liable<\/li>\n<li>The principal is responsible for compliance with the GDPR<\/li>\n<\/ul>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-lqy31r-1ee081c7ca4020a12eeb20ea13649e54\">\n#top .hr.hr-invisible.av-lqy31r-1ee081c7ca4020a12eeb20ea13649e54{\nheight:20px;\n}\n<\/style>\n<div  class='hr av-lqy31r-1ee081c7ca4020a12eeb20ea13649e54 hr-invisible  avia-builder-el-8  el_after_av_textblock  el_before_av_heading'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-2reykf-d7c7bf0ef09057d78aa824bcf80b1efa\">\n#top .av-special-heading.av-2reykf-d7c7bf0ef09057d78aa824bcf80b1efa{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-2reykf-d7c7bf0ef09057d78aa824bcf80b1efa .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-2reykf-d7c7bf0ef09057d78aa824bcf80b1efa .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-2reykf-d7c7bf0ef09057d78aa824bcf80b1efa av-special-heading-h3 blockquote modern-quote  avia-builder-el-9  el_after_av_hr  el_before_av_iconlist'><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >Contents on data processing and data processing agreement<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-knzu0q7v-4f37889e1501a8ab4b111995272ebe01\">\n#top .avia-icon-list-container.av-knzu0q7v-4f37889e1501a8ab4b111995272ebe01 .iconlist_icon{\ncolor:#127db3;\nfont-size:20px;\n}\n#top .avia-icon-list-container.av-knzu0q7v-4f37889e1501a8ab4b111995272ebe01 .iconlist_icon svg:first-child{\nstroke:#127db3;\nfill:#127db3;\nheight:20px;\nwidth:20px;\n}\n#top #wrap_all .avia-icon-list-container.av-knzu0q7v-4f37889e1501a8ab4b111995272ebe01 .av_iconlist_title{\nfont-size:20px;\n}\n<\/style>\n<div  class='avia-icon-list-container av-knzu0q7v-4f37889e1501a8ab4b111995272ebe01  avia-builder-el-10  el_after_av_heading  avia-builder-el-last'><ul class='avia-icon-list avia_animate_when_almost_visible avia-icon-list-left av-iconlist-small av-knzu0q7v-4f37889e1501a8ab4b111995272ebe01 avia-iconlist-animate'>\n<li><div class='iconlist_icon av-wa6k8v-88170f2e1c4bbfd50779ce70ceaed104 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#was-ist-auftragsverarbeitung&#039; title=&#039;When is there talk of data processing?&#039;&gt;When is there talk of data processing?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#was-ist-auftragsverarbeitung' title='When is there talk of data processing?'>When is there talk of data processing?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-ub2jr3-e60c66d320a96c175b120d7b9578d38e avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#wie-funktioniert-auftragsverarbeitung&#039; title=&#039;How does data processing work according to GDPR?&#039;&gt;How does data processing work according to GDPR?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#wie-funktioniert-auftragsverarbeitung' title='How does data processing work according to GDPR?'>How does data processing work according to GDPR?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-sl63zj-326fa06b0bf5605ed60d1d9cf8fbf7dc avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#was-ist-ein-auftragsverarbeitungsvertrag&#039; title=&#039;What is a data processing agreement?&#039;&gt;What is a data processing agreement?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#was-ist-ein-auftragsverarbeitungsvertrag' title='What is a data processing agreement?'>What is a data processing agreement?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><ul>\n<li><a href=\"#unterschied-avv-adv\">Is there a difference between the data processing agreement from the German Federal Data Protection Act (BDSG) and the GDPR?<\/a><\/li>\n<li><a href=\"#inhalt-auftragsverarbeitungsvertrag\">What does a data processing agreement contain?<\/a><\/li>\n<li><a href=\"#aufgaben-auftraggeber-auftragnehmer\">Tasks of the client and processor<\/a><\/li>\n<\/ul>\n<\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-rymfb3-69bb68d36308b2322b739c261d4ed021 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#auftragsverarbeiter&#039; title=&#039;Who is considered a processor?&#039;&gt;Who is considered a processor?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#auftragsverarbeiter' title='Who is considered a processor?'>Who is considered a processor?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-q7q6yn-9053787d885a1fcdc2426e80cf35a0e1 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#pflichten-auftragsverarbeiter&#039; title=&#039;What are the obligations of processors?&#039;&gt;What are the obligations of processors?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#pflichten-auftragsverarbeiter' title='What are the obligations of processors?'>What are the obligations of processors?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-1cawa7-6623740514e0ada4f6e3ea4b44307859 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#bedeutung-av-vertrag-fuer-unternehmen&#039; title=&#039;What is the importance of data processing agreements for companies?&#039;&gt;What is the importance of data processing agreements for companies?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#bedeutung-av-vertrag-fuer-unternehmen' title='What is the importance of data processing agreements for companies?'>What is the importance of data processing agreements for companies?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-ntlmlb-1bef6ac994eb7a8141fcd440ff3998e7 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#wann-muss-avv-geschlossen-werden&#039; title=&#039;When must a data processing agreement be concluded?&#039;&gt;When must a data processing agreement be concluded?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#wann-muss-avv-geschlossen-werden' title='When must a data processing agreement be concluded?'>When must a data processing agreement be concluded?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><ul>\n<li><a href=\"#folgen-bei-fehlenden-avv\">What happens if no data processing contract is concluded?<\/a><\/li>\n<li><a href=\"#wann-wird-kein-avv-benoetigt\">When is a data processing agreement generally not needed?<\/a><\/li>\n<\/ul>\n<\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-h52xmn-22961bf15fd29fb573f3567921fc820a avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#auftragsverarbeitung-im-ausland&#039; title=&#039;What has to be considered when processing data abroad?&#039;&gt;What has to be considered when processing data abroad?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#auftragsverarbeitung-im-ausland' title='What has to be considered when processing data abroad?'>What has to be considered when processing data abroad?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-j9sun3-a48e6ca40d6daa38f59a8b6eac49d586 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#auftragsverarbeitung-in-datenschutzerklaerung-dokumentieren&#039; title=&#039;What must the privacy statement contain with regard to data processing?&#039;&gt;What must the privacy statement contain with regard to data processing?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#auftragsverarbeitung-in-datenschutzerklaerung-dokumentieren' title='What must the privacy statement contain with regard to data processing?'>What must the privacy statement contain with regard to data processing?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-1qj5n3-39f745c85327a2508dc610ee43f26128 avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#verwendung-von-mustervorlagen&#039; title=&#039;Can model contracts be used to draw up a data processing agreement?&#039;&gt;Can model contracts be used to draw up a data processing agreement?&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#verwendung-von-mustervorlagen' title='Can model contracts be used to draw up a data processing agreement?'>Can model contracts be used to draw up a data processing agreement?<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-r2g5rz-15-4-7a747101253dfd3f179a46f2f5a3302f avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#robin-data&#039; title=&#039;Management of the data processing agreements with Robin Data Software&#039;&gt;Management of the data processing agreements with Robin Data Software&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#robin-data' title='Management of the data processing agreements with Robin Data Software'>Management of the data processing agreements with Robin Data Software<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<li><div class='iconlist_icon av-r2g5rz-55128d2c959dc59e23518d64c208327a avia-font-fontello avia-iconfont avia-font-fontello'><span class='av-icon-char' data-av_icon='\ue806' data-av_iconfont='fontello' aria-hidden=\"true\"><\/span><\/div><article class=\"article-icon-entry av-iconlist-empty\"  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class=\"iconlist_content_wrap\"><header class=\"entry-content-header\" aria-label=\"Icon: &lt;a href=&#039;#whitepaper&#039; title=&#039;Whitepaper including sample data processing agreement&#039;&gt;Whitepaper including sample data processing agreement&lt;\/a&gt;\"><div class='av_iconlist_title iconlist_title_small'  itemprop=\"headline\" ><a href='#whitepaper' title='Whitepaper including sample data processing agreement'>Whitepaper including sample data processing agreement<\/a><\/div><\/header><div class='iconlist_content'  itemprop=\"text\" ><\/div><\/div><footer class=\"entry-footer\"><\/footer><\/article><div class=\"iconlist-timeline\"><\/div><\/li>\n<\/ul><\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-nrjgu7-6507b2a34d40db935c66623137e4c82b\">\n.flex_column.av-nrjgu7-6507b2a34d40db935c66623137e4c82b{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-nrjgu7-6507b2a34d40db935c66623137e4c82b av_one_full  avia-builder-el-11  el_after_av_one_full  el_before_av_one_full  first flex_column_div av-zero-column-padding  column-top-margin'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-po169r-5d6ac1bce1e97d2a63ee5e8c254262af\">\n#top .av-special-heading.av-po169r-5d6ac1bce1e97d2a63ee5e8c254262af{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-po169r-5d6ac1bce1e97d2a63ee5e8c254262af .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-po169r-5d6ac1bce1e97d2a63ee5e8c254262af .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"was-ist-auftragsverarbeitung\"  class='av-special-heading av-po169r-5d6ac1bce1e97d2a63ee5e8c254262af av-special-heading-h2 blockquote modern-quote  avia-builder-el-12  el_before_av_textblock  avia-builder-el-first'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >When is there talk of data processing?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-b59ef9b90e0fddf5b04538c2041cb4f9'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>If your company commissions external service providers to process <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/personal-data\">personal data<\/a>(almost always) data processing takes place. In this case, you as the client are responsible for proper data processing and data protection. This has already been laid down in <a href=\"https:\/\/help.robin-data.io\/paragraph-62-bdsg\" target=\"_blank\" rel=\"noopener\">\u00a7 Section 62 BDSG (new)<\/a> and is newly regulated in <a href=\"https:\/\/help.robin-data.io\/artikel-28-dsgvo\" target=\"_blank\" rel=\"noopener\">Art. 28 GDPR<\/a> to find.<\/p>\n<p>Examples of data processing are:<\/p>\n<ul>\n<li>Fully or partially outsourced data centres<\/li>\n<li>Marketing campaigns (e.g. customer surveys or newsletters) by external service providers<\/li>\n<li>External accounting<\/li>\n<li>Use of tracking software<\/li>\n<\/ul>\n<p>However, not every transfer of personal data constitutes data processing. The decisive factor is the binding of instructions. If external service providers can freely decide what happens to your company's data without being bound by your instructions, this is referred to as a transfer of functions. This is not to be considered as data processing.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-oh4of3-39d8d5daea792d45d81c505536f572c3\">\n#top .av-special-heading.av-oh4of3-39d8d5daea792d45d81c505536f572c3{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-oh4of3-39d8d5daea792d45d81c505536f572c3 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-oh4of3-39d8d5daea792d45d81c505536f572c3 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"wie-funktioniert-auftragsverarbeitung\"  class='av-special-heading av-oh4of3-39d8d5daea792d45d81c505536f572c3 av-special-heading-h2 blockquote modern-quote  avia-builder-el-14  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >How does data processing work according to GDPR?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-14-0f50a1c5956b159eedbe26bbe5537631'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><ol>\n<li>Before the start of the commissioned processing, a <strong>data processing agreement<\/strong> shall set out an approach for the implementation of data protection requirements.<\/li>\n<li>Compliance with the data protection requirements by the processor must be regularly checked by the client.\n<ol>\n<li>This can be done through actual on-site inspections, written information, reports by the in-house data protection officer or an expert report.<\/li>\n<li>The type and intervals between the control measures depend on the number and scope of the data transmitted; there is currently no precise legal requirement.<\/li>\n<\/ol>\n<\/li>\n<li>All inspections of the contractor must be documented<\/li>\n<\/ol>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-2b0gun-bc4461d047d8f3375f86124be9a6ecd9\">\n#top .av-special-heading.av-2b0gun-bc4461d047d8f3375f86124be9a6ecd9{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-2b0gun-bc4461d047d8f3375f86124be9a6ecd9 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-2b0gun-bc4461d047d8f3375f86124be9a6ecd9 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"was-ist-ein-auftragsverarbeitungsvertrag\"  class='av-special-heading av-2b0gun-bc4461d047d8f3375f86124be9a6ecd9 av-special-heading-h2 blockquote modern-quote  avia-builder-el-16  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >What is a data processing agreement?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-13-7c0b64b6fef12c0dad1ae118c63ba5c0'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p class=\"translation-block\">The <strong>data processing agreement<\/strong> according to <a href=\"https:\/\/help.robin-data.io\/artikel-28-dsgvo\" target=\"_self\" rel=\"noopener\">Art. 28 GDPR<\/a>, must be concluded when a company lets <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/personal-data\" target=\"_self\">personal data<\/a> be processed by third parties or service providers. It thus replaces the data processing agreement of the BDSG.<\/p>\n<p>A data processing agreement is intended to ensure that service providers process the data only for the purposes for which the client has collected them and thus prohibits their use for their own purposes. In addition, the data processing agreement obliges service providers to protect the data entrusted to them with appropriate measures. Since the <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/controller\">controller<\/a> for the protection of the data according to GDPR remains the client, the latter is granted comprehensive control rights in the contract.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kfsrnj-aedeb455ac0380db9f924ccbb92b31b3\">\n#top .av-special-heading.av-kfsrnj-aedeb455ac0380db9f924ccbb92b31b3{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-kfsrnj-aedeb455ac0380db9f924ccbb92b31b3 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-kfsrnj-aedeb455ac0380db9f924ccbb92b31b3 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"unterschied-avv-adv\"  class='av-special-heading av-kfsrnj-aedeb455ac0380db9f924ccbb92b31b3 av-special-heading-h3  avia-builder-el-18  el_after_av_textblock  el_before_av_textblock'><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >Is there a difference between the data processing agreement from the German Federal Data Protection Act (BDSG) and the GDPR?<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-12-8d772ee71224b3f954c1af502aafce5c'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p class=\"translation-block\">In Germany, data processing was already regulated in a German legislation, the Federal Data Protection Act, before the <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/general-data-protection-regulation-eu-gdpr\" target=\"_self\">GDPR<\/a> came into force. With the entry into force of the GDPR in 2018, the regulations on data processing in the BDSG were replaced.<\/p>\n<p>Adjustments were made to the content, which also affected the duties and responsibilities of the data processors. Among other things, they are now obligated to maintain confidentiality and support the client in the event of inquiries from data subjects and the like.<\/p>\n<p>Another innovation concerned the liability of processors and clients. They are now jointly liable vis-\u00e0-vis data subjects, whereby the liability of the processor is limited to violations resulting from a breach of the obligations specifically defined in the data protection agreement.<\/p>\n<\/div><\/section><br \/>\n<div id='avia-messagebox-' class='avia_message_box av_notification av-knzsv4d6-b6f4ca344388b5d3787ce32686276e48 avia-color-blue avia-size-large avia-icon_select-yes avia-border-  avia-builder-el-20  el_after_av_textblock  el_before_av_heading' ><span class='avia_message_box_title' >Note<\/span><div class=\"avia_message_box_content\"><span class='avia_message_box_icon avia-iconfont avia-font-entypo-fontello' data-av_icon='\ue81f' data-av_iconfont='entypo-fontello' ><\/span><p>The data processing agreement came into force with the GDPR in 2018<\/p>\n<\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-jkpxvj-cde8e8bdda9929254255ed2779dba633\">\n#top .av-special-heading.av-jkpxvj-cde8e8bdda9929254255ed2779dba633{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-jkpxvj-cde8e8bdda9929254255ed2779dba633 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-jkpxvj-cde8e8bdda9929254255ed2779dba633 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"inhalt-auftragsverarbeitungsvertrag\"  class='av-special-heading av-jkpxvj-cde8e8bdda9929254255ed2779dba633 av-special-heading-h3 blockquote modern-quote  avia-builder-el-21  el_after_av_notification  el_before_av_textblock'><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >What is included in a data processing agreement?<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-11-c4264b699fc278230cc252f825ecb9bb'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>To conclude a GDPR-compliant data processing agreement, the following aspects, among others, are required according to <a href=\"https:\/\/help.robin-data.io\/artikel-28-dsgvo\" target=\"_blank\" rel=\"noopener\">Art. 28 para. 3<\/a>\u00a0 to be legally established:<\/p>\n<ul>\n<li>Subject and duration of processing<\/li>\n<li>Nature and purpose of the processing<\/li>\n<li>Type of <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/personal-data\">personal data.<\/a><\/li>\n<li>Categories of persons concerned<\/li>\n<li>Duties and rights of the <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/controller\">controllers<\/a><\/li>\n<li>Adoption of appropriate technical and organisational measures (TOM) for the protection of personal data<\/li>\n<li>Scope of the authority to issue directives<\/li>\n<li>Obligations and rights of the processor<\/li>\n<li>Confidentiality agreement<\/li>\n<li>Reporting obligation of the contractor<\/li>\n<li>Duty to cooperate\/ support by the contractor<\/li>\n<li>Control powers<\/li>\n<li>Legitimate use of subcontractors<\/li>\n<li>Preservation of the <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/rights-of-the-data-subject-gdpr\">Rights of data subjects<\/a><\/li>\n<li>Duration of the order<\/li>\n<li>Termination with return or deletion of the data of the processor<\/li>\n<li>Final provisions<\/li>\n<\/ul>\n<p>In order to be able to guarantee legal protection in the long term, it is necessary to regularly review the data processing agreements. Here you will be supported by the <a href=\"https:\/\/www.robin-data.io\/en\/software-for-data-protection-officers\">Robin Data Software<\/a>. To do this, simply enter a responsible person and the date of the planned review and Robin Data will remind the responsible person of this activity. Besides, an activity report according to GDPR is also created.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-heaxsf-f88336eca108da5dab84024b869a8aaa\">\n#top .av-special-heading.av-heaxsf-f88336eca108da5dab84024b869a8aaa{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-heaxsf-f88336eca108da5dab84024b869a8aaa .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-heaxsf-f88336eca108da5dab84024b869a8aaa .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"aufgaben-auftraggeber-auftragnehmer\"  class='av-special-heading av-heaxsf-f88336eca108da5dab84024b869a8aaa av-special-heading-h3 blockquote modern-quote  avia-builder-el-23  el_after_av_textblock  el_before_av_table'><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >Tasks of the client and contractor<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<div  class='avia-table av-lug433-c7ae9ff4356a969dcb72217a38520b11 main_color avia-pricing-table-container avia_pricing_minimal  avia-builder-el-24  el_after_av_heading  el_before_av_heading  avia-table-1'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Table\" ><div class=\"pricing-table-wrap\"><ul class='pricing-table'><li class='avia-heading-row'><div class='first-table-item'>Client<\/div><span class='pricing-extra'><\/span><\/li><li class=''>Written or electronic data processing agreements regulating specific aspects of data processing<\/li><li class=''>Control of the data protection measures laid down in the data processing agreement<br \/><\/li><li class=''>Responsible for compliance with data protection regulations and the protection of data<\/li><\/ul><\/div><div class=\"pricing-table-wrap\"><ul class='pricing-table'><li class='avia-heading-row'><div class='first-table-item'>Contractor<\/div><span class='pricing-extra'><\/span><\/li><li class=''>Supporting clients in the implementation of data protection requirements<\/li><li class=''>Create data protection concept, which includes the work processing<\/li><li class=''>Preparation of legally compliant data processing agreements<\/li><\/ul><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-1j6gbj-0d7ea878712d0787dc6cef4e8d8cbc72\">\n#top .av-special-heading.av-1j6gbj-0d7ea878712d0787dc6cef4e8d8cbc72{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-1j6gbj-0d7ea878712d0787dc6cef4e8d8cbc72 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-1j6gbj-0d7ea878712d0787dc6cef4e8d8cbc72 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"auftragsverarbeiter\"  class='av-special-heading av-1j6gbj-0d7ea878712d0787dc6cef4e8d8cbc72 av-special-heading-h2 blockquote modern-quote  avia-builder-el-25  el_after_av_table  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Who is considered a processor?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-10-1b52d03dbe94228e414c552bcd1330e2'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>The following shall be deemed to be processors pursuant to <a href=\"https:\/\/help.robin-data.io\/artikel-4-dsgvo\" target=\"_blank\" rel=\"noopener\">Art. 4 No. 8<\/a> of the GDPR a person or body that processes personal data on behalf of the controller. This can be natural or legal persons, as well as authorities, institutions or other bodies.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-din2pb-97c1693f4409e1b4271f60d7d89458ee\">\n#top .av-special-heading.av-din2pb-97c1693f4409e1b4271f60d7d89458ee{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-din2pb-97c1693f4409e1b4271f60d7d89458ee .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-din2pb-97c1693f4409e1b4271f60d7d89458ee .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"pflichten-auftragsverarbeiter\"  class='av-special-heading av-din2pb-97c1693f4409e1b4271f60d7d89458ee av-special-heading-h2 blockquote modern-quote  avia-builder-el-27  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >What are the obligations of processors?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-9-f46b8fd21af65b50a006dd230fe69af9'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><ul>\n<li>Obligation to process data exclusively in accordance with the instructions contractually regulated in the data processing contract<\/li>\n<li>Confidentiality<\/li>\n<li>Obligation to support the client in complying with data protection obligations, as well as in the case of data subject inquiries and other data protection requirements<\/li>\n<li>Obligation to take appropriate technical and organisational measures to protect data<\/li>\n<li>Obligation to report data protection breaches immediately to the supervisory authority and to the data subjects<\/li>\n<li>Mandatory <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/data-protection-impact-assessment-2\" rel=\"noopener\">data protection impact assessments<\/a> to be performed<\/li>\n<\/ul>\n<p>The obligations of the processors can be found in <a href=\"https:\/\/help.robin-data.io\/artikel-28-dsgvo\" target=\"_blank\" rel=\"noopener\">Article 28<\/a> to <a href=\"https:\/\/help.robin-data.io\/artikel-36-dsgvo\" target=\"_blank\" rel=\"noopener\">Article 36<\/a> of the GDPR.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-cvs12n-9092233139016de72c7aa9f2afd2ae5e\">\n#top .av-special-heading.av-cvs12n-9092233139016de72c7aa9f2afd2ae5e{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-cvs12n-9092233139016de72c7aa9f2afd2ae5e .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-cvs12n-9092233139016de72c7aa9f2afd2ae5e .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"bedeutung-av-vertrag-fuer-unternehmen\"  class='av-special-heading av-cvs12n-9092233139016de72c7aa9f2afd2ae5e av-special-heading-h2 blockquote modern-quote  avia-builder-el-29  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >What is the importance of data processing agreements for companies?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-8-09f8e7806527af1be64873ef87cec773'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>Data processing agreements provide clarity for both you and the processor by regulating, among other things, powers, instructions and the purpose of the processing. Rights and obligations are also clearly defined, which creates a certain level of security. In the event of a data protection breach by the processor, the data processing agreement can be used to prove that the responsibility lay within the processor's area of responsibility. Nevertheless, the main responsibility remains with the client.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-3ndwv-7b43075d09787712751554510079dc8a\">\n#top .av-special-heading.av-3ndwv-7b43075d09787712751554510079dc8a{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-3ndwv-7b43075d09787712751554510079dc8a .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-3ndwv-7b43075d09787712751554510079dc8a .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"wann-muss-avv-geschlossen-werden\"  class='av-special-heading av-3ndwv-7b43075d09787712751554510079dc8a av-special-heading-h2 blockquote modern-quote  avia-builder-el-31  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >When must a data processing agreement be concluded?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-7-512e43dc04e4f872eab16a55588d16ad'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>It is not possible to make a blanket statement about when a contract processing agreement must be concluded. The decisive factor is the relationship between the client and the contractor. If the contractor acts on behalf of a company with the authority to issue instructions, the conclusion of an ITC is required. If there is no authority to issue instructions, no GCU must be concluded.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-9mchpr-49c46270efcc51ae22f3105f50ae7aac\">\n#top .av-special-heading.av-9mchpr-49c46270efcc51ae22f3105f50ae7aac{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-9mchpr-49c46270efcc51ae22f3105f50ae7aac .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-9mchpr-49c46270efcc51ae22f3105f50ae7aac .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"folgen-bei-fehlenden-avv\"  class='av-special-heading av-9mchpr-49c46270efcc51ae22f3105f50ae7aac av-special-heading-h3 blockquote modern-quote  avia-builder-el-33  el_after_av_textblock  el_before_av_textblock'><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >What happens if no data processing contract is concluded?<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-6-7a94ecc66837ffde1d68f2818ca4471f'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>If a processing contract is completely missing, although it is required, the GDPR provides in <a href=\"https:\/\/help.robin-data.io\/artikel-83-dsgvo\" target=\"_blank\" rel=\"noopener\">Art. 83<\/a>, as previously the BDSG after <a href=\"https:\/\/help.robin-data.io\/paragraph-43-bdsg\" target=\"_blank\" rel=\"noopener\">\u00a7 43<\/a> fines. In contrast to the BDSG, these have been significantly increased with the GDPR and can now amount to up to \u20ac20 million or up to 4% of the annual turnover generated worldwide.<\/p>\n<p>Fines may also be imposed in case of lack of implementation, incompleteness of the GC contract and non-compliance with instructions during data transmission. In addition, consumers can sue for damages if proof of data misuse can be provided.<\/p>\n<p>In this case, the client and contractor are jointly liable under the GDPR, whereby both parties have the opportunity to prove their innocence. Without a data processing agreement, however, this is difficult to hardly possible, which may result in further costs.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-7x8rwf-1326e006c1258eadc68365d303df3aa2\">\n#top .av-special-heading.av-7x8rwf-1326e006c1258eadc68365d303df3aa2{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-7x8rwf-1326e006c1258eadc68365d303df3aa2 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-7x8rwf-1326e006c1258eadc68365d303df3aa2 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"wann-wird-kein-avv-benoetigt\"  class='av-special-heading av-7x8rwf-1326e006c1258eadc68365d303df3aa2 av-special-heading-h3 blockquote modern-quote  avia-builder-el-35  el_after_av_textblock  el_before_av_textblock'><h3 class='av-special-heading-tag'  itemprop=\"headline\"  >When is a data processing agreement generally not needed?<\/h3><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-5-825c7d078d158691b908c66e91e06362'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>A data processing agreement becomes obsolete if data processors are already obliged to protect personal data due to trade-specific or professional regulations. For example, the use of tax advisors, banks or auditors represent specialist services that do not require a data processing agreement.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-5grren-26bc85bacc24151ed1052b42e8d5cb16\">\n#top .av-special-heading.av-5grren-26bc85bacc24151ed1052b42e8d5cb16{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-5grren-26bc85bacc24151ed1052b42e8d5cb16 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-5grren-26bc85bacc24151ed1052b42e8d5cb16 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"auftragsverarbeitung-im-ausland\"  class='av-special-heading av-5grren-26bc85bacc24151ed1052b42e8d5cb16 av-special-heading-h2 blockquote modern-quote  avia-builder-el-37  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >What has to be considered when processing data abroad?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-4-fa1c6c7f3765e141176da27e7377752d'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>The Federal Data Protection Act already regulated the processing of personal data abroad. This regulation has hardly changed under the GDPR and provides that data collected domestically may not be transferred abroad without the consent of the data subjects or a legal permission.<\/p>\n<p>Member states of the EU or the European Economic Area, as well as countries with an adequate level of data protection, are exempt from this regulation. A list of countries with an adequate level of security, as well as further information on the subject of data transmission abroad, can be found on the following website <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/data-transmission-to-third-countries\">here<\/a>.  Order processing to third countries or third countries shall be carried out taking into account and implementing <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/data-transmission-to-third-countries\">certain measures<\/a> possible.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-4r9rkf-4177ed5e3886dd4c56753239079d54f9\">\n#top .av-special-heading.av-4r9rkf-4177ed5e3886dd4c56753239079d54f9{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-4r9rkf-4177ed5e3886dd4c56753239079d54f9 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-4r9rkf-4177ed5e3886dd4c56753239079d54f9 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"auftragsverarbeitung-in-datenschutzerklaerung-dokumentieren\"  class='av-special-heading av-4r9rkf-4177ed5e3886dd4c56753239079d54f9 av-special-heading-h2 blockquote modern-quote  avia-builder-el-39  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >What must the privacy statement contain with regard to data processing?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-3-a8f807742ab407bd0f751be64ca4b60c'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>The privacy policy of a website should show by whom user data is processed. Tracking services such as Google Analytics should also be listed as external service providers in order to avoid penalties and fines.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-217vy7-f1fe2867980c5419c95542604cb76d6e\">\n#top .av-special-heading.av-217vy7-f1fe2867980c5419c95542604cb76d6e{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-217vy7-f1fe2867980c5419c95542604cb76d6e .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-217vy7-f1fe2867980c5419c95542604cb76d6e .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"verwendung-von-mustervorlagen\"  class='av-special-heading av-217vy7-f1fe2867980c5419c95542604cb76d6e av-special-heading-h2 blockquote modern-quote  avia-builder-el-41  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Can model contracts be used to draw up a data processing agreement?<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-2-b0b06cbe5c763f79078f4470d4715074'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>Sample templates can be used to create a contract processing agreement. They can ensure clarity on both sides, as DSGVO-compliant specifications are already in place. Nevertheless, sample templates must be adapted to individual cases and filled out correctly. In doing so, a <a href=\"https:\/\/www.robin-data.io\/en\/data-protection-officer-gdpr\">expert or a data protection officer<\/a>\u00a0should be consulted.<\/p>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-ko9sgpm8-ccbda1a716e0cf4e1171461aed02be37\">\n#top .av-special-heading.av-ko9sgpm8-ccbda1a716e0cf4e1171461aed02be37{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-ko9sgpm8-ccbda1a716e0cf4e1171461aed02be37 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-ko9sgpm8-ccbda1a716e0cf4e1171461aed02be37 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  id=\"robin-data\"  class='av-special-heading av-ko9sgpm8-ccbda1a716e0cf4e1171461aed02be37 av-special-heading-h2 blockquote modern-quote  avia-builder-el-43  el_after_av_textblock  el_before_av_textblock'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Management of the data processing agreements with Robin Data Software<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-42k28v-e415a728a199c82b5a8f0eda783b124e'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>Robin Data Software offers data protection officers the possibility to sign all order processing contracts with external service providers and contacts.<strong> to manage one place<\/strong>. For this purpose, you can not only create and manage the contracts digitally, but also directly include GDPR-compliant in your processing activities. This allows you to create a digital and data protection-compliant data protection documentation step-by-step.<\/p>\n<p><a href=\"https:\/\/help.robin-data.io\/vertraege-verwalten\" target=\"_blank\" rel=\"noopener\">You can find more information on managing order processing contracts in our help centre.<\/a><\/p>\n<\/div><\/section><\/p><\/div>\n<div  id=\"whitepaper\"  class='flex_column av-l261vmfv-3f1637823166f4c57ee5faf842423599 av_one_full  avia-builder-el-45  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kupad4ee-486ee2660388ae1792fb8f8411031f97\">\n#top .av-special-heading.av-kupad4ee-486ee2660388ae1792fb8f8411031f97{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-kupad4ee-486ee2660388ae1792fb8f8411031f97 .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-kupad4ee-486ee2660388ae1792fb8f8411031f97 .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-kupad4ee-486ee2660388ae1792fb8f8411031f97 av-special-heading-h2 blockquote modern-quote  avia-builder-el-46  el_before_av_image  avia-builder-el-first'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >Whitepaper including sample data processing agreement<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kupas4ud-68bb42ff68fc75e0b029000575e91822\">\n.avia-image-container.av-kupas4ud-68bb42ff68fc75e0b029000575e91822 img.avia_image{\nbox-shadow:none;\n}\n.avia-image-container.av-kupas4ud-68bb42ff68fc75e0b029000575e91822 .av-image-caption-overlay-center{\ncolor:#ffffff;\n}\n<\/style>\n<div  class='avia-image-container av-kupas4ud-68bb42ff68fc75e0b029000575e91822 av-styling- avia-align-left  avia-builder-el-47  el_after_av_heading  el_before_av_hr  tp_de2'   itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" ><div class=\"avia-image-container-inner\"><div class=\"avia-image-overlay-wrap\"><img decoding=\"async\" fetchpriority=\"high\" class='wp-image-12104 avia-img-lazy-loading-not-12104 avia_image' src=\"https:\/\/media.robin-data.io\/2021\/04\/13110416\/Cover-Whitepaper-Vertragsmanagement-AVV-1030x429.png\" alt='Illustration with details of the Whitepaper AVV. Details are explained in the following section' title='Cover-Whitepaper-Contract Management-AVV'  height=\"429\" width=\"1030\"  itemprop=\"thumbnailUrl\" srcset=\"https:\/\/media.robin-data.io\/2021\/04\/13110416\/Cover-Whitepaper-Vertragsmanagement-AVV-1030x429.png 1030w, https:\/\/media.robin-data.io\/2021\/04\/13110416\/Cover-Whitepaper-Vertragsmanagement-AVV-300x125.png 300w, https:\/\/media.robin-data.io\/2021\/04\/13110416\/Cover-Whitepaper-Vertragsmanagement-AVV-768x320.png 768w, https:\/\/media.robin-data.io\/2021\/04\/13110416\/Cover-Whitepaper-Vertragsmanagement-AVV-18x7.png 18w, https:\/\/media.robin-data.io\/2021\/04\/13110416\/Cover-Whitepaper-Vertragsmanagement-AVV-705x293.png 705w, https:\/\/media.robin-data.io\/2021\/04\/13110416\/Cover-Whitepaper-Vertragsmanagement-AVV.png 1110w\" sizes=\"(max-width: 1030px) 100vw, 1030px\" \/><\/div><\/div><\/div><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kaqhpdsy-c149d804dc26de4da98e9603962fa194\">\n#top .hr.hr-invisible.av-kaqhpdsy-c149d804dc26de4da98e9603962fa194{\nheight:25px;\n}\n<\/style>\n<div  class='hr av-kaqhpdsy-c149d804dc26de4da98e9603962fa194 hr-invisible  avia-builder-el-48  el_after_av_image  el_before_av_textblock'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<section  class='av_textblock_section av-knzskhju-1-1ffe6a31b15b9a8ad1cf416c08eaccb9'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p style=\"font-size: 20px; color: #00b3bd;\">In the whitepaper DSGVO-compliant contract management incl. sample template order processing contract you will find:<\/p>\n<ul>\n<li>Get information on the <strong>Order processing and the processor<\/strong><\/li>\n<li>Learn more about the creation of <strong>Order processing contracts<\/strong><\/li>\n<li>Including detailed <strong>Sample template order processing agreement<\/strong> as Word file and PDF<\/li>\n<\/ul>\n<\/div><\/section><br \/>\n<br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-30yje7-f71aea6797d308c95c57d8f81488985f\">\n.avia_message_box.av-30yje7-f71aea6797d308c95c57d8f81488985f{\nbackground-color:rgba(244,150,0,0.3);\ncolor:#303440;\n}\n.avia_message_box.av-30yje7-f71aea6797d308c95c57d8f81488985f .avia_message_box_icon.avia-svg-icon svg:first-child{\nfill:#303440;\nstroke:#303440;\n}\n<\/style>\n<div id='avia-messagebox-' class='avia_message_box av_notification av-30yje7-f71aea6797d308c95c57d8f81488985f avia-color-custom avia-size-large avia-icon_select-no avia-border-  avia-builder-el-51  el_after_av_codeblock  avia-builder-el-last  tp_en2' ><div class=\"avia_message_box_content\"><p>Unfortunately this content is currently only available in German. Please feel free to <a href=\"https:\/\/www.robin-data.io\/en\/contact#formular\">contact us<\/a> for more information.<\/p>\n<\/div><\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-38irt4-a3265c4a84bbfe7bcd111a53bb63e885\">\n.flex_column.av-38irt4-a3265c4a84bbfe7bcd111a53bb63e885{\nborder-radius:10px 10px 10px 10px;\npadding:50 px 50 px 50 px 50 px;\nbackground-color:#f7f7f7;\n}\n<\/style>\n<div  class='flex_column av-38irt4-a3265c4a84bbfe7bcd111a53bb63e885 av_one_full  avia-builder-el-52  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><p>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-kyvh7ddh-88f459c425d11f07794c890166dcbdca\">\n#top .av-special-heading.av-kyvh7ddh-88f459c425d11f07794c890166dcbdca{\npadding-bottom:10px;\n}\nbody .av-special-heading.av-kyvh7ddh-88f459c425d11f07794c890166dcbdca .av-special-heading-tag .heading-char{\nfont-size:25px;\n}\n.av-special-heading.av-kyvh7ddh-88f459c425d11f07794c890166dcbdca .av-subheading{\nfont-size:15px;\n}\n<\/style>\n<div  class='av-special-heading av-kyvh7ddh-88f459c425d11f07794c890166dcbdca av-special-heading-h2 blockquote modern-quote  avia-builder-el-53  el_before_av_textblock  avia-builder-el-first'><h2 class='av-special-heading-tag'  itemprop=\"headline\"  >FAQ<\/h2><div class=\"special-heading-border\"><div class=\"special-heading-inner-border\"><\/div><\/div><\/div><br \/>\n<section  class='av_textblock_section av-kyvfw40q-a294d5f42e3c4461ada2f967d1d98073'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><p>Robin Data follows the recommendations of the supervisory authorities in terms of content - the following FAQ uses content from the Bavarian State Office for Data Protection Supervision. Here you can find the <a href=\"https:\/\/www.lda.bayern.de\/de\/faq.html\">FAQ of the LDA Bavaria.<\/a><\/p>\n<\/div><\/section><br \/>\n<div  class='togglecontainer av-kyvh3ums-5597ae6c19d1b49e4762bfd48c78a629 av-elegant-toggle  avia-builder-el-55  el_after_av_textblock  avia-builder-el-last  toggle_close_all'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/FAQPage\" >\n<section class='av_toggle_section av-kyvh1brt-ec3a9708cc18a987c681997ff59af18a'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-1' data-fake-id='#toggle-id-1' class='toggler  av-title-above'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-1' data-slide-speed=\"200\" data-title=\"Was regelt der Auftragsverarbeitungsvertrag?\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Was regelt der Auftragsverarbeitungsvertrag?\" data-aria_expanded=\"Click to collapse: Was regelt der Auftragsverarbeitungsvertrag?\">What does the order processing contract regulate?<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-1' aria-labelledby='toggle-toggle-id-1' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color'  itemprop=\"text\" ><div class=\"wWOJcd\" tabindex=\"0\" role=\"button\" aria-controls=\"exacc_4qryYa7FN5aPxc8Pl_WVwAI4\" aria-expanded=\"true\" aria-labelledby=\"exacc_4qryYa7FN5aPxc8Pl_WVwAI3\">\n<div class=\"r21Kzd\" data-hveid=\"CBAQAQ\" data-ved=\"2ahUKEwiuvpOAkdL1AhWWR_EDHZd6BSgQuk56BAgQEAE\">The <b>data processing agreement<\/b> regulates the rights and obligations of the \"principal\" and the \"contractor\". This specifically concerns the processing of personal data.<\/div>\n<\/div>\n<\/div><\/div><\/div><\/section>\n<section class='av_toggle_section av-kyvgglnp-f5fb7476c4f8cc90715853363d881ea5'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-2' data-fake-id='#toggle-id-2' class='toggler  av-title-above'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-2' data-slide-speed=\"200\" data-title=\"Wann liegt eine Auftragsverarbeitung vor?\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Wann liegt eine Auftragsverarbeitung vor?\" data-aria_expanded=\"Click to collapse: Wann liegt eine Auftragsverarbeitung vor?\">When is commissioned processing present?<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-2' aria-labelledby='toggle-toggle-id-2' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color'  itemprop=\"text\" ><p>Commissioned processing is when a client is commissioned to process personal data. This processing order includes, for example, professional services. In terms of data protection law, a commissioned processing contract only exists if the data processing concerns personal data.<\/p>\n<\/div><\/div><\/div><\/section>\n<section class='av_toggle_section av-kyvgeemu-073f96083b7655eb921343c10830dfbc'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-3' data-fake-id='#toggle-id-3' class='toggler  av-title-above'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-3' data-slide-speed=\"200\" data-title=\"Wie muss ein Vertrag zur Auftragsverarbeitung gestaltet sein?\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Wie muss ein Vertrag zur Auftragsverarbeitung gestaltet sein?\" data-aria_expanded=\"Click to collapse: Wie muss ein Vertrag zur Auftragsverarbeitung gestaltet sein?\">How must a contract for commissioned processing be structured?<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-3' aria-labelledby='toggle-toggle-id-3' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color'  itemprop=\"text\" ><p>The content requirements are based on <a href=\"https:\/\/help.robin-data.io\/artikel-28-dsgvo\" target=\"_blank\" rel=\"noopener\">Art. 28 (3) DSGVO<\/a>.<\/p>\n<\/div><\/div><\/div><\/section>\n<section class='av_toggle_section av-kyvgvsre-f30818341d2a5d8565f52334f354f3dc'  itemscope=\"itemscope\" itemprop=\"mainEntity\" itemtype=\"https:\/\/schema.org\/Question\" ><div role=\"tablist\" class=\"single_toggle\" data-tags=\"{All} \"  ><p id='toggle-toggle-id-4' data-fake-id='#toggle-id-4' class='toggler  av-title-above'  itemprop=\"name\"  role='tab' tabindex='0' aria-controls='toggle-id-4' data-slide-speed=\"200\" data-title=\"Welche Form schreibt die DSGVO f\u00fcr einen Vertrag zur Auftragsverarbeitung vor?\" data-title-open=\"\" data-aria_collapsed=\"Click to expand: Welche Form schreibt die DSGVO f\u00fcr einen Vertrag zur Auftragsverarbeitung vor?\" data-aria_expanded=\"Click to collapse: Welche Form schreibt die DSGVO f\u00fcr einen Vertrag zur Auftragsverarbeitung vor?\">What form does the GDPR prescribe for a contract for commissioned processing?<span class=\"toggle_icon\"><span class=\"vert_icon\"><\/span><span class=\"hor_icon\"><\/span><\/span><\/p><div id='toggle-id-4' aria-labelledby='toggle-toggle-id-4' role='region' class='toggle_wrap  av-title-above'   itemscope=\"itemscope\" itemprop=\"acceptedAnswer\" itemtype=\"https:\/\/schema.org\/Answer\" ><div class='toggle_content invers-color'  itemprop=\"text\" ><p>The GDPR stipulates in <a href=\"https:\/\/help.robin-data.io\/artikel-28-dsgvo\" target=\"_blank\" rel=\"noopener\">Art. 28 (9) GDPR<\/a> stipulates that the contract for commissioned processing must be drawn up in writing. Written in the sense of the GDPR also includes the electronic or digital provision of the contract electronically. In terms of the obligations to provide evidence of data protection documentation, the controller and contractor must document the commissioned processing day, in particular in order to be meaningful in the event of an inspection by the supervisory authorities.<\/p>\n<\/div><\/div><\/div><\/section>\n<\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-6kfnq7-755e685685256eee7a2f96cf75577f2a\">\n.flex_column.av-6kfnq7-755e685685256eee7a2f96cf75577f2a{\nborder-radius:10px 10px 10px 10px;\npadding:50 px 50 px 50 px 50 px;\nbackground-color:#f7f7f7;\n}\n<\/style>\n<div  class='flex_column av-6kfnq7-755e685685256eee7a2f96cf75577f2a av_one_full  avia-builder-el-56  el_after_av_one_full  el_before_av_one_full  first flex_column_div  column-top-margin'     ><p><br \/>\n<div  class='av-social-sharing-box av-3301zz-6467c2474bb1f6a47a4f14b855864edb av-social-sharing-box-default  avia-builder-el-58  el_after_av_codeblock  avia-builder-el-last  av-social-sharing-box-fullwidth'><div class=\"av-share-box\"><h5 class='av-share-link-description av-no-toc'>Do you like the piece? Feel free to share it.<\/h5><ul class=\"av-share-box-list noLightbox\"><li class='av-share-link av-social-link-facebook avia_social_iconfont' ><a target=\"_blank\" aria-label=\"Share on Facebook\" href='https:\/\/www.facebook.com\/sharer.php?u=https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement&#038;t=Auftragsverarbeitungsvertrag%20DSGVO-konform%20erstellen' data-av_icon='\ue8f3' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share on Facebook'><span class='avia_hidden_link_text'>Share on Facebook<\/span><\/a><\/li><li class='av-share-link av-social-link-twitter avia_social_iconfont' ><a target=\"_blank\" aria-label=\"Share on X\" href='https:\/\/twitter.com\/share?text=Auftragsverarbeitungsvertrag%20DSGVO-konform%20erstellen&#038;url=https:\/\/www.robin-data.io\/en\/?p=9967' data-av_icon='\ue932' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share on X'><span class='avia_hidden_link_text'>Share on X<\/span><\/a><\/li><li class='av-share-link av-social-link-linkedin avia_social_iconfont' ><a target=\"_blank\" aria-label=\"Share on LinkedIn\" href='https:\/\/linkedin.com\/shareArticle?mini=true&#038;title=Auftragsverarbeitungsvertrag%20DSGVO-konform%20erstellen&#038;url=https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement' data-av_icon='\ue8fc' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share on LinkedIn'><span class='avia_hidden_link_text'>Share on LinkedIn<\/span><\/a><\/li><li class='av-share-link av-social-link-mail avia_social_iconfont' ><a  aria-label=\"Share by Mail\" href='mailto:?subject=Auftragsverarbeitungsvertrag%20DSGVO-konform%20erstellen&#038;body=https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement' data-av_icon='\ue805' data-av_iconfont='entypo-fontello'  title='' data-avia-related-tooltip='Share by Mail'><span class='avia_hidden_link_text'>Share by Mail<\/span><\/a><\/li><\/ul><\/div><\/div><\/p><\/div>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-av_one_full-79ff81c021393065cee878051452f6a6\">\n.flex_column.av-av_one_full-79ff81c021393065cee878051452f6a6{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-av_one_full-79ff81c021393065cee878051452f6a6 av_one_full  avia-builder-el-59  el_after_av_one_full  avia-builder-el-last  first flex_column_div av-zero-column-padding  column-top-margin'     ><section  class='av_textblock_section av-av_textblock-23482006190359359522c957f3a311aa'   itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><div class='avia_textblock'  itemprop=\"text\" ><h3 style=\"text-align: center;\">This might interest you too:<\/h3>\n<\/div><\/section><br \/>\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-av_hr-ecec01c1a62feb8bfc9f43a45319c97d\">\n#top .hr.hr-invisible.av-av_hr-ecec01c1a62feb8bfc9f43a45319c97d{\nheight:25px;\n}\n<\/style>\n<div  class='hr av-av_hr-ecec01c1a62feb8bfc9f43a45319c97d hr-invisible  avia-builder-el-61  el_after_av_textblock  el_before_av_blog'><span class='hr-inner'><span class=\"hr-inner-style\"><\/span><\/span><\/div><br \/>\n<div  data-slideshow-options=\"{&quot;animation&quot;:&quot;fade&quot;,&quot;autoplay&quot;:false,&quot;loop_autoplay&quot;:&quot;once&quot;,&quot;interval&quot;:5,&quot;loop_manual&quot;:&quot;manual-endless&quot;,&quot;autoplay_stopper&quot;:false,&quot;noNavigation&quot;:false,&quot;show_slide_delay&quot;:90}\" class='avia-content-slider avia-content-grid-active avia-content-slider1 avia-content-slider-odd  avia-builder-el-62  el_after_av_hr  avia-builder-el-last  av-slideshow-ui av-control-default   av-no-slider-navigation av-slideshow-manual av-loop-once av-loop-manual-endless'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Blog\" ><div class=\"avia-content-slider-inner\"><div class=\"slide-entry-wrap\"><article class='slide-entry flex_column  post-entry post-entry-17156 slide-entry-overview slide-loop-1 slide-parity-odd  av_one_third first real-thumbnail posttype-post post-format-standard'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/datenschutz-management-system-dsgvo-dsms' data-rel='slide-1' class='slide-image' title='DSMS according to GDPR: Structure &amp; practical implementation'><img decoding=\"async\" width=\"495\" height=\"341\" src=\"https:\/\/media.robin-data.io\/2022\/05\/23150650\/Zusammenarbeit-1-495x341.jpg\" class=\"wp-image-14089 avia-img-lazy-loading-not-14089 attachment-portfolio size-portfolio wp-post-image\" alt=\"\" \/><\/a><div class=\"slide-content\"><header class=\"entry-content-header\" aria-label=\"Slide: DSMS according to GDPR: Structure &amp; practical implementation\"><h3 class='slide-entry-title entry-title'  itemprop=\"headline\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/datenschutz-management-system-dsgvo-dsms' title='DSMS according to GDPR: Structure &amp; practical implementation'>DSMS according to GDPR: Structure &amp; practical implementation<\/a><\/h3><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/www.robin-data.io\/en\/category\/data-protection-and-data-security-academy\/wiki\" rel=\"tag\">Wiki<\/a> <\/span><span class=\"av-vertical-delimiter\"><\/span><\/header><div class='slide-entry-excerpt entry-content'  itemprop=\"text\" >Learn all about templates, structure and implementation of a GDPR-compliant data protection management system (DMS).<div class=\"read-more-link\"><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/datenschutz-management-system-dsgvo-dsms\" class=\"more-link\">Read more<span class='more-link-arrow avia-svg-icon avia-font-svg_entypo-fontello' data-av_svg_icon='right-open-big' data-av_iconset='svg_entypo-fontello'><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"15\" height=\"32\" viewbox=\"0 0 15 32\" preserveaspectratio=\"xMidYMid meet\" role=\"graphics-symbol\" aria-hidden=\"true\">\n<path d=\"M0.416 27.84l11.456-11.84-11.456-11.904q-0.832-0.832 0-1.536 0.832-0.832 1.536 0l12.544 12.608q0.768 0.832 0 1.6l-12.544 12.608q-0.704 0.832-1.536 0-0.832-0.704 0-1.536z\"><\/path>\n<\/svg><\/span><\/a><\/div><\/div><\/div><footer class=\"entry-footer\"><div class=\"slide-meta\"><time class='slide-meta-time updated'  itemprop=\"datePublished\" datetime=\"2025-04-23T09:41:39+02:00\" >23 April 2025<\/time><div class=\"slide-meta-del\">\/<\/div><div class=\"slide-meta-comments\"><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/datenschutz-management-system-dsgvo-dsms#respond'>0 Comments<\/a><\/div><\/div><\/footer><span class='hidden'>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" >\n\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/05\/23150650\/Zusammenarbeit-1.jpg<\/span>\n\t\t\t\t\t\t<span itemprop='height'>341<\/span>\n\t\t\t\t\t\t<span itemprop='width'>685<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\" >\n\t\t\t\t\t\t<span itemprop='name'>Caroline Schwabe<\/span>\n\t\t\t\t\t\t<span itemprop='logo' itemscope itemtype='https:\/\/schema.org\/ImageObject'>\n\t\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/07\/05140916\/Robin-Data_ComplianceOS_white_logo.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class='av-structured-data'  itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\" ><span itemprop='name'>Caroline Schwabe<\/span><\/span><span class='av-structured-data'  itemprop=\"datePublished\" datetime=\"2021-04-27T11:58:51+02:00\" >2025-04-23 09:41:39<\/span><span class='av-structured-data'  itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\" >2025-04-23 09:44:29<\/span><span class='av-structured-data'  itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\" ><span itemprop='name'>DSMS according to GDPR: Structure &amp; practical implementation<\/span><\/span><\/span><\/article><article class='slide-entry flex_column  post-entry post-entry-17123 slide-entry-overview slide-loop-2 slide-parity-even  av_one_third  real-thumbnail posttype-post post-format-standard'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/ki-und-datenschutz-praxisleitfaden' data-rel='slide-1' class='slide-image' title='AI and data protection in practice'><img decoding=\"async\" width=\"495\" height=\"343\" src=\"https:\/\/media.robin-data.io\/2025\/01\/27132208\/kuenstliche-intelligenz-ai-495x343.png\" class=\"wp-image-16986 avia-img-lazy-loading-not-16986 attachment-portfolio size-portfolio wp-post-image\" alt=\"artificial intelligence\" \/><\/a><div class=\"slide-content\"><header class=\"entry-content-header\" aria-label=\"Slide: AI and data protection in practice\"><h3 class='slide-entry-title entry-title'  itemprop=\"headline\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/ki-und-datenschutz-praxisleitfaden' title='AI and data protection in practice'>AI and data protection in practice<\/a><\/h3><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/www.robin-data.io\/en\/category\/data-protection-and-data-security-academy\/wiki\" rel=\"tag\">Wiki<\/a> <\/span><span class=\"av-vertical-delimiter\"><\/span><\/header><div class='slide-entry-excerpt entry-content'  itemprop=\"text\" >Find out how artificial intelligence can be used in compliance with the GDPR. A practical guide.<div class=\"read-more-link\"><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/ki-und-datenschutz-praxisleitfaden\" class=\"more-link\">Read more<span class='more-link-arrow avia-svg-icon avia-font-svg_entypo-fontello' data-av_svg_icon='right-open-big' data-av_iconset='svg_entypo-fontello'><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"15\" height=\"32\" viewbox=\"0 0 15 32\" preserveaspectratio=\"xMidYMid meet\" role=\"graphics-symbol\" aria-hidden=\"true\">\n<path d=\"M0.416 27.84l11.456-11.84-11.456-11.904q-0.832-0.832 0-1.536 0.832-0.832 1.536 0l12.544 12.608q0.768 0.832 0 1.6l-12.544 12.608q-0.704 0.832-1.536 0-0.832-0.704 0-1.536z\"><\/path>\n<\/svg><\/span><\/a><\/div><\/div><\/div><footer class=\"entry-footer\"><div class=\"slide-meta\"><time class='slide-meta-time updated'  itemprop=\"datePublished\" datetime=\"2025-04-07T13:24:22+02:00\" >7 April 2025<\/time><div class=\"slide-meta-del\">\/<\/div><div class=\"slide-meta-comments\"><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/ki-und-datenschutz-praxisleitfaden#comments'>4 Comments<\/a><\/div><\/div><\/footer><span class='hidden'>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" >\n\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2025\/01\/27132208\/kuenstliche-intelligenz-ai.png<\/span>\n\t\t\t\t\t\t<span itemprop='height'>343<\/span>\n\t\t\t\t\t\t<span itemprop='width'>685<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\" >\n\t\t\t\t\t\t<span itemprop='name'>Caroline Schwabe<\/span>\n\t\t\t\t\t\t<span itemprop='logo' itemscope itemtype='https:\/\/schema.org\/ImageObject'>\n\t\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/07\/05140916\/Robin-Data_ComplianceOS_white_logo.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class='av-structured-data'  itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\" ><span itemprop='name'>Caroline Schwabe<\/span><\/span><span class='av-structured-data'  itemprop=\"datePublished\" datetime=\"2021-04-27T11:58:51+02:00\" >2025-04-07 13:24:22<\/span><span class='av-structured-data'  itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\" >2025-04-07 13:46:33<\/span><span class='av-structured-data'  itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\" ><span itemprop='name'>AI and data protection in practice<\/span><\/span><\/span><\/article><article class='slide-entry flex_column  post-entry post-entry-13099 slide-entry-overview slide-loop-3 slide-parity-odd  post-entry-last  av_one_third  real-thumbnail posttype-post post-format-standard'  itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\" itemprop=\"blogPost\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/activity-report-template-sample-content-according-to-gdpr' data-rel='slide-1' class='slide-image' title='activity report according to GDPR'><img decoding=\"async\" width=\"495\" height=\"343\" src=\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten-495x343.jpg\" class=\"wp-image-14057 avia-img-lazy-loading-not-14057 attachment-portfolio size-portfolio wp-post-image\" alt=\"\" \/><\/a><div class=\"slide-content\"><header class=\"entry-content-header\" aria-label=\"Slide: Activity report according to GDPR\"><h3 class='slide-entry-title entry-title'  itemprop=\"headline\" ><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/activity-report-template-sample-content-according-to-gdpr' title='activity report according to GDPR'>activity report according to GDPR<\/a><\/h3><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/www.robin-data.io\/en\/category\/data-protection-and-data-security-academy\/wiki\" rel=\"tag\">Wiki<\/a> <\/span><span class=\"av-vertical-delimiter\"><\/span><\/header><div class='slide-entry-excerpt entry-content'  itemprop=\"text\" >Templates, whitepapers and implementation of the activity report according to the GDPR. Create the activity report automatically in just a few steps.<div class=\"read-more-link\"><a href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/activity-report-template-sample-content-according-to-gdpr\" class=\"more-link\">Read more<span class='more-link-arrow avia-svg-icon avia-font-svg_entypo-fontello' data-av_svg_icon='right-open-big' data-av_iconset='svg_entypo-fontello'><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"15\" height=\"32\" viewbox=\"0 0 15 32\" preserveaspectratio=\"xMidYMid meet\" role=\"graphics-symbol\" aria-hidden=\"true\">\n<path d=\"M0.416 27.84l11.456-11.84-11.456-11.904q-0.832-0.832 0-1.536 0.832-0.832 1.536 0l12.544 12.608q0.768 0.832 0 1.6l-12.544 12.608q-0.704 0.832-1.536 0-0.832-0.704 0-1.536z\"><\/path>\n<\/svg><\/span><\/a><\/div><\/div><\/div><footer class=\"entry-footer\"><div class=\"slide-meta\"><time class='slide-meta-time updated'  itemprop=\"datePublished\" datetime=\"2022-03-04T10:32:48+01:00\" >4 March 2022<\/time><div class=\"slide-meta-del\">\/<\/div><div class=\"slide-meta-comments\"><a href='https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/activity-report-template-sample-content-according-to-gdpr#respond'>0 Comments<\/a><\/div><\/div><\/footer><span class='hidden'>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\" >\n\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg<\/span>\n\t\t\t\t\t\t<span itemprop='height'>343<\/span>\n\t\t\t\t\t\t<span itemprop='width'>685<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class='av-structured-data'  itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\" >\n\t\t\t\t\t\t<span itemprop='name'>Caroline Schwabe<\/span>\n\t\t\t\t\t\t<span itemprop='logo' itemscope itemtype='https:\/\/schema.org\/ImageObject'>\n\t\t\t\t\t\t\t<span itemprop='url'>https:\/\/media.robin-data.io\/2022\/07\/05140916\/Robin-Data_ComplianceOS_white_logo.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class='av-structured-data'  itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\" ><span itemprop='name'>Caroline Schwabe<\/span><\/span><span class='av-structured-data'  itemprop=\"datePublished\" datetime=\"2021-04-27T11:58:51+02:00\" >2022-03-04 10:32:48<\/span><span class='av-structured-data'  itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\" >2025-04-22 09:38:20<\/span><span class='av-structured-data'  itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\" ><span itemprop='name'>activity report according to GDPR<\/span><\/span><\/span><\/article><\/div><\/div><\/div><\/p><\/div>","protected":false},"excerpt":{"rendered":"<p>All information on the data processing agreement according to GDPR. What do controllers have to consider when creating and managing?<\/p>","protected":false},"author":3,"featured_media":14057,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[71],"tags":[123,37,183],"class_list":["post-9967","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wiki","tag-aufgaben","tag-datenschutz","tag-dsms"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.8 (Yoast SEO v26.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Wann ist ein Auftragsverarbeitungsvertrag erforderlich? | Wiki<\/title>\n<meta name=\"description\" content=\"Alle Informationen zum Auftragsverarbeitungsvertrag nach DSGVO. Wir unterst\u00fctzen Sie bei dessen Erstellung und Verwaltung. Jetzt informieren!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Auftragsverarbeitungsvertrag DSGVO-konform erstellen\" \/>\n<meta property=\"og:description\" content=\"Alle Informationen zum Auftragsverarbeitungsvertrag nach DSGVO. Wir unterst\u00fctzen Sie bei dessen Erstellung und Verwaltung. Jetzt informieren!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement\" \/>\n<meta property=\"og:site_name\" content=\"Robin Data GmbH\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/robindatade\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-27T09:58:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-22T07:39:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"685\" \/>\n\t<meta property=\"og:image:height\" content=\"343\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Caroline Schwabe\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@RobinData_DE\" \/>\n<meta name=\"twitter:site\" content=\"@RobinData_DE\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Caroline Schwabe\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen\"},\"author\":{\"name\":\"Caroline Schwabe\",\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5\"},\"headline\":\"Auftragsverarbeitungsvertrag DSGVO-konform erstellen\",\"datePublished\":\"2021-04-27T09:58:51+00:00\",\"dateModified\":\"2025-04-22T07:39:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen\"},\"wordCount\":6150,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage\"},\"thumbnailUrl\":\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg\",\"keywords\":[\"Aufgaben\",\"Datenschutz\",\"DSMS\"],\"articleSection\":[\"Wiki\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#respond\"]}]},{\"@type\":[\"WebPage\",\"ItemPage\"],\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen\",\"url\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen\",\"name\":\"Wann ist ein Auftragsverarbeitungsvertrag erforderlich? | Wiki\",\"isPartOf\":{\"@id\":\"https:\/\/www.robin-data.io\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage\"},\"thumbnailUrl\":\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg\",\"datePublished\":\"2021-04-27T09:58:51+00:00\",\"dateModified\":\"2025-04-22T07:39:28+00:00\",\"author\":{\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5\"},\"description\":\"Alle Informationen zum Auftragsverarbeitungsvertrag nach DSGVO. Wir unterst\u00fctzen Sie bei dessen Erstellung und Verwaltung. Jetzt informieren!\",\"breadcrumb\":{\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage\",\"url\":\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg\",\"contentUrl\":\"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg\",\"width\":685,\"height\":343},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/www.robin-data.io\/startseite\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Auftragsverarbeitungsvertrag DSGVO-konform erstellen\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.robin-data.io\/#website\",\"url\":\"https:\/\/www.robin-data.io\/\",\"name\":\"Robin Data GmbH\",\"description\":\"Robin Data ComplianceOS\u00ae Das Compliance Operating System\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.robin-data.io\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5\",\"name\":\"Caroline Schwabe\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.robin-data.io\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g\",\"caption\":\"Caroline Schwabe\"},\"description\":\"Frau Schwabe ist Informationsdesignerin und Datenschutzbeauftragte. Der Schwerpunkt ihrer Arbeit liegt darin, Kunden und Interessenten mit Beitr\u00e4gen in der Robin Data Datenschutz-Akademie weiterzuhelfen.\",\"url\":\"https:\/\/www.robin-data.io\/en\/author\/csc\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"When is a data processing agreement required? | Wiki","description":"All information about the data processing agreement according to GDPR. We support you in its creation and management. Learn more now!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement","og_locale":"en_GB","og_type":"article","og_title":"Auftragsverarbeitungsvertrag DSGVO-konform erstellen","og_description":"Alle Informationen zum Auftragsverarbeitungsvertrag nach DSGVO. Wir unterst\u00fctzen Sie bei dessen Erstellung und Verwaltung. Jetzt informieren!","og_url":"https:\/\/www.robin-data.io\/en\/data-protection-and-data-security-academy\/wiki\/gdpr-compliant-data-processing-agreement","og_site_name":"Robin Data GmbH","article_publisher":"https:\/\/www.facebook.com\/robindatade\/","article_published_time":"2021-04-27T09:58:51+00:00","article_modified_time":"2025-04-22T07:39:28+00:00","og_image":[{"width":685,"height":343,"url":"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg","type":"image\/jpeg"}],"author":"Caroline Schwabe","twitter_card":"summary_large_image","twitter_creator":"@RobinData_DE","twitter_site":"@RobinData_DE","twitter_misc":{"Written by":"Caroline Schwabe","Estimated reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#article","isPartOf":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen"},"author":{"name":"Caroline Schwabe","@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5"},"headline":"Auftragsverarbeitungsvertrag DSGVO-konform erstellen","datePublished":"2021-04-27T09:58:51+00:00","dateModified":"2025-04-22T07:39:28+00:00","mainEntityOfPage":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen"},"wordCount":6150,"commentCount":0,"image":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage"},"thumbnailUrl":"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg","keywords":["Aufgaben","Datenschutz","DSMS"],"articleSection":["Wiki"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#respond"]}]},{"@type":["WebPage","ItemPage"],"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen","url":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen","name":"When is a data processing agreement required? | Wiki","isPartOf":{"@id":"https:\/\/www.robin-data.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage"},"image":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage"},"thumbnailUrl":"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg","datePublished":"2021-04-27T09:58:51+00:00","dateModified":"2025-04-22T07:39:28+00:00","author":{"@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5"},"description":"All information about the data processing agreement according to GDPR. We support you in its creation and management. Learn more now!","breadcrumb":{"@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#primaryimage","url":"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg","contentUrl":"https:\/\/media.robin-data.io\/2022\/05\/23150313\/Dokumentationspflichten.jpg","width":685,"height":343},{"@type":"BreadcrumbList","@id":"https:\/\/www.robin-data.io\/datenschutz-akademie\/wiki\/auftragsverarbeitungsvertrag-dsgvo-konform-erstellen#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.robin-data.io\/startseite"},{"@type":"ListItem","position":2,"name":"Auftragsverarbeitungsvertrag DSGVO-konform erstellen"}]},{"@type":"WebSite","@id":"https:\/\/www.robin-data.io\/#website","url":"https:\/\/www.robin-data.io\/","name":"Robin Data GmbH","description":"Robin Data ComplianceOS\u00ae The Compliance Operating System","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.robin-data.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/83e2bd965d3e87f50c5da3c0b541dfe5","name":"Caroline Schwabe","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.robin-data.io\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4afcd09464d8c4418a7e62c3fdd2103c84addcb37103428b60586d9b32b79b3f?s=96&d=mm&r=g","caption":"Caroline Schwabe"},"description":"Ms. Schwabe is an information designer and Data Protection Officer. The focus of her work is to help customers and interested parties with contributions to the Robin Data Privacy Academy.","url":"https:\/\/www.robin-data.io\/en\/author\/csc"}]}},"_links":{"self":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts\/9967","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/comments?post=9967"}],"version-history":[{"count":62,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts\/9967\/revisions"}],"predecessor-version":[{"id":10505,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/posts\/9967\/revisions\/10505"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/media\/14057"}],"wp:attachment":[{"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/media?parent=9967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/categories?post=9967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.robin-data.io\/en\/wp-json\/wp\/v2\/tags?post=9967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}