Data Processing Agreement (AVV)
The agreement required by Art. 28 GDPR when a service provider processes personal data on behalf of a controller.
If a security company uses software that stores employee data, it remains the controller as defined by the GDPR. The software provider processes the data only on its behalf and is therefore the processor. For this arrangement, Art. 28 GDPR requires an agreement, the Auftragsverarbeitungsvertrag (AVV).
It regulates the subject matter and duration of the processing, the obligation to follow instructions, confidentiality, technical and organizational measures, the use of subprocessors, and the deletion and return of data at the end. The AVV must be concluded at least in text form.
Balerion Security takes care of exactly that.
Scheduling, ArbZG checks, guard logs and payroll exports in one system, specifically for security services.
Try free for 14 daysRelated terms
- Geofencing (Zeiterfassung)Ein virtueller Radius um ein Objekt, in dem Kräfte per App ein- und ausstempeln, DSGVO-konform als einzelnes Check-in-Ereignis, nicht als Dauerortung.
- Zeiterfassung im SicherheitsdienstDie verpflichtende Erfassung der Arbeitszeit, im Wachgewerbe meist mobil und geofenced, weil an wechselnden Objekten gearbeitet wird.