Supplier Relationships (A. 15 sub-processor relationships) In case the data processor uses or plan to use a sub-processor: Formal guidelines and procedures including relevant contractual measures covering the pre- sent criteria for the processing of personal data by a sub-processor should be in place before the processing takes place. If requested by the data controller, the documentation showing the sub-processor’s compliance with these Clauses and/or the GDPR and/or relevant Member State legislation is made available to the data controller within a reasonable timeframe and without undue delay. These guideline, procedures and contractual measures shall establish at least the same level of personal data protection and security as mandated in these Clauses.
