Applicable Measures. Depending on the seriousness of the harassment, remedial action may, for either or both parties, include training, adjustments to the work environment, various forms of apology, transfer of either party, or the full range of disciplinary action, including dismissal of the wrongdoer if he or she is an NFB staff member. In the case of an independent contractor, recommendations can lead to cancellation of a contract for goods or services. Implementation Where remedial or disciplinary action is recommended and approved by the NFB Commissioner, it will be implemented within the time limit set by the Commissioner, but this limit may not exceed ten (10) working days of the parties’ receipt of the report, unless there are exceptional circumstances. Longer-term initiatives, such as the development and implementation of training, may not be completed within this time frame, but steps toward their completion must have been initiated. Management, in fulfilling its responsibilities, may choose to vary the recommended remedial action for legitimate business or legal reasons. This is acceptable provided the desired result can be achieved and provided the Commissioner gives his or her approval.
Applicable Measures. Each Party acknowledges and confirms that it has and shall continue to employ appropriate technology and procedures in accordance with Applicable Law to prevent accidental loss or corruption of the Disclosed Personal Information, unauthorized input or access to the Disclosed Personal Information, or unauthorized or unlawful collection, storage, disclosure, recording, copying, alteration, removal, deletion, use or other processing of such Disclosed Personal Information.
Applicable Measures. 1.1 The Processor uses following measures when processing Personal data: DOCUMENT/INSTRUCTION/ASSESSMENT/ CONFIRMATION OF THE EXECUTION OF THE ACTIVITY In use or not (Filled in by the Processo r) Explanation (Filled in if there is an extra question in the box or if clarification is deemed necessary) Has a data protection audit been carried out? Audit finds out why, where and what data is stored and processed in the company. ☒ In use ☐ Not in use An up-to-date register of personal data processing operations (Art. 30 GDPR; registry is the basis for all GDPR compliance activities. The register provides an overview of activities with personal data, basis, retention, etc.) ☒ In use ☐ Not in use ☐ N/A Privacy Policy that covers processing done under the Agreement (which meets the requirements of the GDPR; published on the website) ☒ In use ☐ Not in use The terms and conditions and use of cookies and other web technologies (if the company has a website that uses cookies or similar technologies, it must be ensured that the website visitor is notified of the use of cookies and asks for consent) ☒ In use ☐ Not in use There is an internal information and guidance document on how personal data is processed and how it should be processed (including an overview of mandatory organizational measures – e.g., screen lock, VPN, empty table policy, etc.) ☒ In use ☐ Not in use Internal procedures in place to ensure data security (e.g., information security policy) ☒ In use ☐ Not in use Assessments of legitimate interest have been carried out for processing operations where the processing is carried out on the basis of a legitimate interest ☐ In use ☐ Not in use ☒ N/A For processing as a Processor under the Agreement and the DPA legal basis are the same as the Controllers. GDPR compliant data processing agreements with (sub)processors have been concluded ☒ In use ☐ Not in use There is a guide for handling security incidents/breaches related to Personal data and the breaches are registered in the breach register ☒ In use ☐ Not in use Data protection impact assessments have been carried out if the processing requires it ☐ In use ☐ Not in use ☒ N/A The Processor has evaluated its service and concluded that there is no need for the DPIA. The Processor monitors the GDPR principles in the ☒ In use processing of Personal data to the maximum extent possible, i.e.,: legality, fairness and transparency; purpose limitation; data minimization; ensuring correctness; storage limitation; inte...
