TEHTRIS’ Obligations to the data controller In this regard, TEHTRIS undertakes to: - To cooperate with and assist the data controller in fulfilling its obligations, - Process the data controller's personal data only for the purposes for which they are processed as described above, process them only in accordance with the data controller's written instructions and refrain from any personal or commercial use, - If TEHTRIS considers that an instruction constitutes a violation of the applicable regulations on the protection of personal data, it shall immediately inform the controller. TEHTRIS reserves the right not to carry out any unlawful instruction of the controller, without any liability on its part, - Ensure the confidentiality of the personal data processed under the Agreement, - Ensure that persons authorized to handle personal data are subject to a duty of confidentiality, - Consider the principles of personal data protection by design and by default, - Comply with an internal security program in accordance with the ISO/IEC 27001 Standard or its equivalent as agreed between the Parties including the controls of ISO/IEC 27002, - To assist the data controller in carrying out impact analyses relating to the protection of personal data and, where appropriate, in carrying out the prior consultation with the supervisory authority, - Refrain from using or allowing or facilitating the use by third parties, on the part of a subcontractor or a person acting under the authority or on behalf of TEHTRIS, for purposes other than the performance of the services, as well as from any use or processing or any other operation or exploitation without the prior authorization of the controller.
