Common use of Transfer Control/Transportation Control Clause in Contracts

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator for the processing of Personal Information described in this Agreement / Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator for the processing of Personal Information described in this Agreement / Addendum: Addendum Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:packaging

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. e.g., through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator for the processing of Personal Information described in this Agreement / Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational organisational measures have been implemented by the Operator for the processing of Personal Information described in this Agreement / Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized anonymised or pseudonymized pseudonymised form In case of physical transportation: secure containers/packaging Miscellaneous:packaging

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator for the processing of Personal Information described in this Agreement / Agreement/Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator Recipient for the processing of Personal Information described in this Agreement / Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:packaging

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator for the processing of Personal Information described in this Agreement / AddendumOperator Agreement: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the sub- Operator for the processing of Personal Information described in this Agreement / AddendumSub-Operator Agreement: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the sub-Operator for the processing of Personal Information described in this Agreement / Addendumsub- Operator Agreement: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational organisational measures have been implemented by the Operator Recipient for the processing of Personal Information described in this Agreement / Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized anonymised or pseudonymized pseudonymised form In case of physical transportation: secure containers/packaging Miscellaneous:packaging

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator Recipient for the processing of Personal Information described in this Agreement / Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous:

Transfer Control/Transportation Control. Ensuring that the confidentiality and integrity of data is protected during the transfer of Personal Information and the transportation of data storage media (e.g. through powerful encryption of data transmissions, closed envelopes used in mailings, encrypted saving on data storage media). The following technical and organizational measures have been implemented by the Operator Recipient for the processing of Personal Information described in this Agreement / Addendum: Establishment of dedicated lines or VPN tunnels Encrypted data transmission on the Internet (such as HTTPS, SFTP, etc.) E-mail encryption Documentation of the recipients of data and time frames of planned transmission or agreed erasure deadlines In case of physical transportation: careful selection of transportation personnel and vehicles Transmission of data in an anonymized or pseudonymized form In case of physical transportation: secure containers/packaging Miscellaneous::