Personal data protection

Art. 1.1

The provisions of Regulation 2016/679/EU on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, hereinafter referred to as the GDPR (General Data Protection Regulation),

Art. 1.2

The Parties ensure that any processing of the personal data they come into contact with is carried out in accordance with the principles of the GDPR.

Art. 1.3

The Parties declare that they are aware of the legal provisions in the field of data protection and that they will take all technical and organisational measures necessary to comply with them.

Art. 1.4

The Parties declare that the processing of the personal data they come into contact with is necessary for carrying out their activity and for the proper performance of the contract.

Art. 1.5

The Parties declare that they will not use the personal data they come into contact with for any purpose other than performing the contract. The Parties declare that the purpose pursued is genuine and legitimate. The Parties declare that if, during the performance of the contract, other purposes for processing the data should arise, they will seek the consent of the data subjects.

Art. 1.6

The Parties declare that they will transmit only personal data that is relevant, adequate and limited to the purpose of the processing, while ensuring its protection.

Art. 1.7

The Parties declare that they will process the data they receive in a way that respects its confidentiality, taking all measures necessary for the security of the data.

Art. 1.8

The Parties undertake to notify any breach of the security of personal data within a maximum of 24 hours from the moment they became aware of it, and to pass on as much information about that incident as possible. The Parties guarantee that they will inform the other party correctly and fully about any development in the incident and about the measures they are taking, consulting with the other party in order to limit the consequences of the incident.

Art. 1.9

Any data security breach incident is to be reported to the e-mail address: discalr [at] yahoo.com or to the address of the Parties given in chapter I.

Art. 1.10

The Parties undertake to provide support should a breach of data security occur, and to notify the National Supervisory Authority for Personal Data Processing of the incident without undue delay.

Art. 1.11

The Parties agree that the provisions and measures communicated by the National Supervisory Authority for Personal Data Processing are binding on the Parties and immediately applicable.

Art. 1.12

Failure by either Party to comply with the data protection provisions in force engages the liability of the Party at fault.