Contractual Clauses Relating to the European Regulation on Personal Data Protection (GDPR)

Article I: Purpose

This clause aims to define the conditions under which BESTLOG (hereinafter referred to as 'the subcontractor') commits to carrying out, on behalf of the Client (hereinafter referred to as 'the data controller'), the personal data processing operations defined below.

Article II: Description of the Processing Subject to Subcontracting

The subcontractor is authorized to process personal data on behalf of the data controller necessary for customer maintenance and technical requests, product improvement, customer support and assistance, and correction of operational anomalies.

Article III: Duration of the Contract

This contract reflects the contractual terms of the original contract's duration.

Article IV: Obligations of the Subcontractor towards the Data Controller

The subcontractor commits to:

• Process the data only for the purpose(s) for which subcontracting is intended.
• Process the data in accordance with the documented instructions of the data controller as specified in the annex of this contract.
• Ensure the confidentiality of personal data.
• Ensure that persons authorized to process personal data commit to respecting confidentiality.
• Take data protection principles into account from the design stage.

Article V: Subcontracting

The subcontractor may engage another subcontractor to carry out specific processing activities, with the obligation to inform the data controller in advance.

Article VI: Right to Information of Data Subjects

It is the responsibility of the data controller to provide information to data subjects regarding processing operations at the time of data collection.

Article VII: Exercising the Rights of Data Subjects

As far as possible, the subcontractor must assist the data controller in fulfilling its obligation to respond to requests for the exercise of the rights of data subjects.

Article VIII: Notification of Personal Data Breaches

The subcontractor notifies the data controller of any personal data breach without undue delay.

Article IX: Assistance of the Subcontractor in Respecting the Data Controller's Obligations

The subcontractor assists the data controller in conducting data protection impact assessments.

Article X: Security Measures

The subcontractor commits to implementing appropriate technical and organizational security measures.

Article XI: Data Disposal

Upon completion of service provision, the subcontractor commits to destroy all personal data.

Article XII: Register of Categories of Processing Activities

The subcontractor declares to maintain a written register of all categories of processing activities carried out on behalf of the data controller.

Article XIII: Documentation

The subcontractor provides the necessary documentation to demonstrate compliance with its obligations.

Article XIV: Obligations of the Data Controller towards the Subcontractor

The data controller commits to providing the subcontractor with the data and ensuring the legality of the personal data processing.

Use of Google Analytics and Google reCAPTCHA

We use Google Analytics to collect information about how visitors interact with our website. This helps us understand usage patterns and improve the experience for users. Google Analytics collects data such as your IP address, device information, and behavior on the website. This data is anonymized and used solely for analytical purposes. We also use Google reCAPTCHA to protect our forms from spam and abuse. reCAPTCHA collects data to distinguish between humans and bots. This may involve capturing information about your interaction with the site, device details, and user behavior. By using our site, you consent to the processing of data by Google for these purposes, as outlined in Google's Privacy Policy.