Translations:Informativa sulla Protezione dei dati/15/en

The supplier or business partner must process personal data only in order to fulfill its contractual obligations towards the Organization or on the latter’s instructions, and not for any other purposes. Where the Organization processes personal data jointly with an independent third party, it must explicitly specify the respective responsibilities in the relevant contract or in any other legally binding document, such as the supplier’s data processing agreement.