audit rights dpa residency · Terms of Service
Goodie policy finding
“ 3.1. Controller Obligations and Rights Customer, as Controller, shall: (a) ensure it has lawful basis for processing and transfers; (b) provide clear processing instructions to Goodie; (c) implement appropriate technical and organizational measures; (d) conduct data protection impact assessments where required; (e) respond to data subject requests within required timeframes; and (f) notify supervisory authorities of Personal Data breaches where required. Customer, as controller, has the right to: (a) receive information about Goodie’s processing activities; (b) audit Goodie’s compliance with this DPA; and (c) object to new subprocessors and terminate if objection is not reasonably accommodated. 3.2 Processing Instructions. Goodie will process Personal Data only on documented instructions from Customer, including with regard to transfers of Personal Data to third countries or international organizations, unless required to do so by European Union or Member State law. 3.3 Confidentiality. Goodie ensures that persons authorized to process Personal Data have committed themselves to confidentiality or are under appropriate statutory obligation of confidentiality. 3.4 Security Measures. Goodie implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, as detailed in Annex II. 3.5 Subprocessors. Goodie may engage other processors (subprocessors) with Customer’s general written authorization, subject to:”
- Document
- Terms of Service
- Captured
- 2026-06-08
- Location
- § 3 (GDPR/UK GDPR COMPLIANCE)
- Snapshot SHA-256
- 8e739f903f32d1a174efad9396fe5badeb96a58bae1841aacec0cfdb8676f988
Informational only, not legal advice. Terms change; verify the source and capture date.