The processor shall ensure, by provided systematic, organisational and technical measures, adequate security of information with regard to the confidentiality, integrity and accessibility of the processing of personal data, in accordance with the provisions of current data protection legislation on information security. For more details, you can read the ProtonMail data processing agreement or read the generic model data processing agreement that we have made available on this website. (a) the processing, including the transfer itself, of the personal data has been carried out and continues to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where appropriate, notified to the competent authorities of the Member State in which the data exporter is established) and does not infringe the relevant provisions of that State; Article 32 sets out the security requirements applicable to controllers and processors, with a view to protecting the rights and security of their data subjects. These security measures are mentioned in the GDPR guidelines on appropriate data processing agreements. Article 29 provides that data must always be processed solely on the instructions of the data controller. In essence, the data controller is the owner of such data and is responsible for it, so no body should ever process such data unless the data controller has invited them to do so (except in cases where Union or Member State law so requires). `processor` means any processor mandated by the data importer or by any other processor of the data importer, who agrees to obtain from the data importer or another processor of the data importer personal data intended exclusively for processing activities carried out after the transfer, in accordance with its instructions, on behalf of the data exporter; the terms of the clauses and the conditions of the written subcontract; 2. .
