Terms and Conditions on Data Protection

The processing of personal data is required in order for Lindebarn to fulfil its obligations in accordance with the contract. The purpose of these terms and conditions is to determine the rights and obligations of the Parties with regard to data protection in order to enable Lindebarn to process data. 

The data may be processed solely for the purpose of enabling Lindebarn to fulfil its obligations in accordance with the contract. Lindebarn will process the personal data only on documented instructions from the Client.

For the sake of clarity, the Parties note that the Client is, under the applicable data protection laws, the controller of the personal data that is processed by Lindebarn. 

The Client acknowledges that the Client alone is responsible for complying with all applicable data protection laws in the Client’s own operations. The Client confirms that Lindebarn may process the data as necessary for the fulfilment of the contract and that any necessary consents have been acquired from the data subjects. 

The Client undertakes to, without undue delay, inform Lindebarn if the processing data is or becomes prohibited.

Lindebarn shall process the data lawfully and carefully, in compliance with good processing practice, and also otherwise so that the legal rights of the data subjects are safeguarded. Lindebarn will not engage another processor without prior specific or general written authorisation of the Client.

Lindebarn implements appropriate technical and organizational measures necessary to maintain security of processing and for securing any data against unauthorized access, against accidental or unlawful destruction, manipulation, disclosure and transfer and against other unlawful processing of any data. Lindebarn will immediately inform the Client in case the data processed by Lindebarn is subject to data loss, data infringement or other unlawful processing.

Upon request, Lindebarn allow for and will contribute to data protection audits, including inspections, conducted by the controller or another auditor mandated by the controller.

Lindebarn will also assist the controller by appropriate technical and organisational measures for the fulfilment of the controller’s obligation to respond to requests for exercising the data subject’s rights as well as otherwise assists the controller in ensuring compliance with the obligations, insofar as this is necessary and possible.

Lindebarn undertakes not to disclose any data to any third parties and to maintain an appropriate level of confidentiality within its organization during the processing of data.