Data Processing Agreement Training

  • Uncategorized

13.1. KnowBe4, upon receipt of written notification from customer of at least thirty (30) days in advance, will submit its data processing facilities for appropriate review of the processing activities carried out under this DPA, provided that such audit is carried out by an independent external auditor mutually agreed between the parties and subject to an obligation of confidentiality (“Auditor”) and, where appropriate, by the competent supervisory board. Approved by the authorities. The effort, as well as the internal and external costs of the audits requested by the customer in accordance with this section, are the responsibility of the customer. c. Even if the data importer is unable to communicate a subcontracting agreement to the data exporter, the parties agree that the data importer, at the request of the data exporter (on a confidential basis), shall provide the data exporter with all the information it reasonably needs under such a sub-processing agreement. Under Article 83, fines of up to `up to EUR 10 000 000 or, in the case of an undertaking, up to 2% of the overall annual turnover of the previous financial year, whichever is greater`, may be imposed for infringements of the obligations referred to in Article 28 and other articles which may be involved in a data processing contract. The data subject may, vis-à-vis the data importer, apply this clause, clause 5 (a) to (e) and (g), clause 6, clause 7, clause 8 (2) and clauses 9 to 12 shall be applied when the data exporter has effectively disappeared or if it has legally ceased to exist, unless a successor body has assumed all the legal obligations of the data exporter by contract or by law, which allows him to assume the rights and obligations of the data exporter, in the event that the data subject can enforce them vis-à-vis that body. This addition to the GDPR data processing (“DPA”) is part of the Terms of Use or other written or electronic agreements between KnowBe4, Inc. and/or its associated companies (“KnowBe4”) and the Customer regarding the provision of products and/or services by KnowBe4 to the Customer (the “Agreement”). This DPA reflects the agreement of the parties regarding the processing of personal data (as defined below) during the execution of the agreement. By performing this DPA, the customer finalizes this DPA on behalf of its affiliates, when and to the extent that KnowBe4 processes personal data for which these related companies are considered responsible.

For the purposes of this CCA and unless otherwise specified, the term “client” means the organization that includes the CCA and includes, where applicable, its related businesses. In this DPA, the customer and the know-how can be individually referred to as a “party” or “parties” together. This type of contract governs the relationship between a controller, a processor and the data processed. . . .

Close Menu