Disclosure to third parties

Whenever the Organization uses a third-party supplier or business partner to process personal data on its behalf, the controller must ensure that such party provides appropriate security measures to safeguard personal data in relation to the associated risks. For this purpose, an appropriate compliance questionnaire must be used.