Common use of Description of Technical and Organizational Measures Clause in Contracts

Description of Technical and Organizational Measures. Description of the technical and organisational security measures implemented by the data importer: • Physical Access Control No unauthorised access to Data Processing Facilities, e.g.: magnetic or chip cards, keys, electronic door openers, facility security services and/or entrance security staff, alarm systems, video/CCTV Systems • Electronic Access Control No unauthorised use of the Data Processing and Data Storage Systems, e.g.: (secure) passwords, automatic blocking/locking mechanisms, two-factor authentication, encryption of data carriers/storage media • Internal Access Control (permissions for user rights of access to and amendment of data) No unauthorised Reading, Copying, Changes or Deletions of Data within the system, e.g. rights authorisation concept, need-based rights of access, logging of system access events • Isolation Control The isolated Processing of Data, which is collected for differing purposes, e.g. multiple Client support, sandboxing; and