The type of data to be processed and the categories of affected persons are a result from the service descriptions of the DATEV services commissioned by the customer and the corresponding data protection profiles. These are available at www.datev.de.
The change in the security measures taken is reserved
to the contractor, but it must be ensured that the level of
protection that is appropriate or contractually agreed is not
undercut.
A description of the technical and organizational measures, of the Contractor can be found following these conditions.
The contractor shall take the necessary measures to safeguard the data and to reduce the possible adverse consequences of the persons concerned and shall immediately discuss this with the client.
In special cases determined by the client, a storage or handover, compensation and protective measures are agreed separately, unless already agreed in the contract.
For the assistance in carrying out an inspection with the client, the contractor will be reimbursed for his expenses at his respective valid hourly rates.
The client agrees that the contractor will involve subcontractors. Before contracting or replacing the subcontractors, the contractor will inform the client with a notice period of three weeks. The client may object to the change - for a good reason - within a reasonable period. If there is no objection within the time deadline, the change is considered as accepted.
In case of any contradictions, regulations of this annex on data protection are subject to the regulations of the contract. Should individual parts of these conditions be ineffective, this does not otherwise affect the effectiveness of the system.