Common use of Availability and Resilience of Processing Systems and Services Clause in Contracts

Availability and Resilience of Processing Systems and Services. Availability includes measures that ensure that personal data is protected from accidental destruction or loss due to internal or external influences. Resilience of processing systems and services includes measures that ensure the ability to withstand attacks or to quickly restore systems to working order after an attack. • Tape-media based backup solution • Implementation of transport policies • Backup Concept • Protection of stored backup media 3. The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident, Art. 32 para 1 point c GDPR 4. A process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing, Art. 32 para 1 point d GDPR

Availability and Resilience of Processing Systems and Services. Availability includes measures that ensure that personal data Personal Data is protected from accidental destruction or loss due to internal or external influences. Resilience of processing systems and services includes measures that ensure the ability to withstand attacks or to quickly restore systems to working order after an attack. • Tape-media based backup solution • Implementation of transport policies • Backup Concept • Protection of stored backup media 3. The ability to restore the availability and access to personal data Personal Data in a timely manner in the event of a physical or technical incident, Art. 32 para 1 point c GDPR 4. A process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing, Art. 32 para 1 point d GDPR 5. Additional technical and organizational measures to comply with Art. 32 GDPR and international data transfer requirements 6. Description of the specific technical and organizational measures to be taken by Carrot to assist with the fulfilment of data subject requests (Clause 10 (b) SCC)

Availability and Resilience of Processing Systems and Services. Availability includes measures that ensure that personal data is protected from accidental destruction or loss due to internal or external influences. Resilience of processing systems and services includes measures that ensure the ability to withstand attacks or to quickly restore systems to working order after an attack. • Tape-These measures include: Tape- media based backup solution • solution; Implementation of transport policies • policies; Backup Concept • and Protection of stored backup media 3. The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident, Art. 32 para 1 point c GDPR 4. A process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing, Art. 32 para 1 point d GDPR