Common use of PROCEDURES FOR REGULAR REVIEW, ASSESSMENT AND EVALUATION Clause in Contracts

PROCEDURES FOR REGULAR REVIEW, ASSESSMENT AND EVALUATION. A comprehensive data protection management system is implemented at Xxxxxxxxxx.Xxx. There is a guideline on data protection and information security and policies to ensure the implementation of the guideline's objectives. The guideline and the policies are regularly evaluated and adjusted with regard to their effectiveness. A Data Protection and Information Security Team is in place to plan, implement, evaluate and make adjustments to data privacy and information security measures. In particular, it is ensured that data protection incidents are recognized by all employees and reported to the team without delay. The team will investigate the incident immediately. If data processed on behalf of customers is affected, care is taken to ensure that they are informed immediately about the nature and scope of the incident.