Glossary
TERM
AV-Vertrag
An AV-Vertrag is the data processing agreement under Art. 28 GDPR, in text form, that governs how a processor handles personal data on a controller's behalf; it is mandatory whenever a provider processes such data on your behalf.
Art. 28 (3) GDPR prescribes the content: subject, duration, nature and purpose of the processing, the data categories, the duty to follow instructions and the rules for sub-processors.
The agreement must be in writing, which may be in electronic form (Art. 28 (9)): text form is enough, a signature on paper is not required.
At MitaBase the agreement is being finalised with a lawyer and is not offered before that; the security page says where it stands.
ALSO CALLED
- AVV
- Auftragsverarbeitung
- Art. 28 DSGVO