People-People ApS Dalgas Boulevard 48

People-People ApS Xxxxxx Xxxxxxxxx 00

2000 Frederiksberg

CVR-nr: 44163446

[”People-People”)

Databehandleraftale Data Processing Agreement

1.	Præambel	Preamble
1.1	People-People erklærer ved indgåelse af Aftalen, at denne vil gennemføre de passende tekniske og organisatoriske foranstaltninger på en sådan måde, at behandlingen opfylder kravene i databeskyttelsesforordningen og sikrer beskyttelse af de registreredes rettigheder.	People-People declares that it will implement appropriate technical and organizational measures in such a way that the processing meets the requirements of the General Data Protection Regulation and ensures the protection of the data subjects´ rights.
1.2	I tilfælde af fortolkningstvivl skal den danske version af nærværende have forrang over den engelske.	In case of any ambiguity in interpretation, the Danish version of said document shall prevail over the English version.
2.	Aftalens genstand	Subject of processing
2.1	Behandlingen vedrører udførelse af opgaver, der følger af Aftalen mellem Kunden og People-People.	The processing of personal data is required to fulfil the Agreement between the Customer and People-People.
2.2	Behandlingens varighed følger Aftalen.	The duration of the processing of data follows the Agreement.
2.3	Der behandles personoplysninger om Kundens jobansøgere, ansatte og tidligere ansatte samt de ansattes og tidligere ansattes pårørende.	The processing includes data regarding the Customers applicants, employees, and former employees as well as next of kin to employees and former employees.
2.4	Behandlingen består i indsamling, opbevaring, anvendelse, videregivelse og sletning af personoplysninger med det formål at varetage kundens HR-opgaver i overensstemmelse med Aftalen.	The processing consists of the collection, storage, use, disclosure, and deletion of personal data for the purpose of handling the customer's HR tasks in accordance with the Agreement.
2.5	Der behandles almindelige personoplysninger, jf. artikel 6 i form kontaktoplysninger, herunder navn, adresse og telefonnummer	General personal data is processed, cf. Article 6 in the form of contact information, including

	samt oplysninger om løn- og ansættelsesforhold.	name, address, and telephone number as well as information on salary and employment.
2.6	Der behandles alle typer særlige kategorier af personoplysninger, jf. artikel 9, som anført i bestemmelsens stykke 1.	All types of special categories of personal data are processed, cf. Article 9, as stated in paragraph 1 of the provision.
2.7	Der behandles oplysninger om strafbare forhold, jf. Artikel 10 i form af straffeattester og børneattester.	Information on criminal convictions, cf. Article 10, is processed in the form of criminal records and child records.
2.8	Der behandles oplysninger om nationalt identifikationsnummer, jf. Artikel 87 i form af personnummer.	Information on national identification number, cf. Article 87, is processed in the form of a personal identification number.
3	Instruks	Instructions
3.1	People-People må kun behandle personoplysninger efter dokumenteret instruks fra Kunden. Aftalen udgør en sådan instruks.	People-People may only process data in accordance with documented instructions from the Customer. The Agreement constitutes such an instruction.
3.2	Kravet om Xxxxxxx skriftlige instruks af People-Peoples behandlinger under Punkt 3.1 kan alene tilsidesættes, hvis det kræves i henhold til EU-ret eller medlemsstaternes nationale ret, som People-People er underlagt.	The requirement for People-People´s written instructions of the Customer´s procedures under clause 3.1 can only be set aside if this is required by EU or national law to which People-People is subject.
3.3	Gør People-People punkt 3.2 gældende underretter People-People Kunden om dette retlige krav uden ugrundet ophold inden behandlingen, medmindre den pågældende ret forbyder en sådan underretning af hensyn til vigtige samfundsmæssige interesser.	If clause 3.2 applies, People-People shall notify the Customer of this legal claim without undue delay before processing, unless the law in question prohibits such notification on important grounds of public interest in so far as this is possible.
4	De registreredes rettigheder	The rights of data subjects
4.1	Under hensyntagen til behandlingens karakter bistår People-People så vidt muligt Xxxxxx ved hjælp af passende tekniske og organisatoriske foranstaltninger, med opfyldelse af Kundens forpligtelse til at besvare anmodninger om udøvelse af de registreredes rettigheder som fastlagt i Databeskyttelsesforordningens kapitel III.	The nature of the processing considered, People-People assists the Customer, by appropriate technical and organizational measures, insofar as this is possible, for fulfilment of the Customer`s obligation to respond to requests for exercising the data subjects’ rights as laid down in Chapter III of the General Data Protection Regulation.
4.2	People-People er berettiget til særskilt honorering for bistand, der følger af punkt 4.1 ovenfor i overensstemmelse med de til enhver tid gældende timesatser, som anført under punkt 2.4.2 i Abonnementsvilkårene.	People-People is entitled to separate remuneration for assistance resulting from point 4.1 above in accordance with the hourly rates applicable at any time, as stated under point 2.4.2 of the Subscription Terms.

5	Datasikkerhed	Data protection
5.1	People-People bistår Kunden med at sikre overholdelse af forpligtelserne i medfør af artikel 32-36 under hensyntagen til behandlingens karakter og de oplysninger, der er tilgængelige for People-People.	People-People assists the Customer in ensuring compliance with the obligations pursuant to Articles 32 to 36, considering the nature of the processing and the information available to People-People.
5.2	People-People iværksætter alle foranstaltninger, som kræves i henhold til Databeskyttelsesforordningens artikel 32.	People-People is obliged to take all measures required in accordance with Article 32 of the General Data Protection Regulation.
5.3	People-People sikrer, at de personer, der er autoriseret til at behandle personoplysningerne, har forpligtet sig til fortrolighed i deres ansættelseskontrakt eller er underlagt en passende lovbestemt tavshedspligt.	People-People ensures the persons authorized to process the personal data have committed to confidentiality in their employment contract or are subject to an appropriate statutory obligation of confidentiality.
5.4	People-People er berettiget til særskilt honorering for bistand, der følger af punkt 5.1 ovenfor i overensstemmelse med det til enhver tid gældende timesatser, som anført under punkt 2.4.2 i Abonnementsvilkårene.	People-People is entitled to separate remuneration for assistance resulting from point 5.1 above in accordance with the hourly rates applicable at any time, as stated under point 2.4.2 of the Subscription Terms.
6	Underdatabehandlere	Data sub-processors
6.1	Kunden giver hermed People-People generel skriftlig godkendelse til anvendelse af underdatabehandlere i relation til levering af ydelserne som følger af Aftalen. Kunden kan altid se People-Peoples underdatabehandlere på People-Peoples hjemmeside, hvor People- People også orienterer om ændringer i valg af underdatabehandlere.	The Customer hereby provides People-People with a general approval to use sub-processors in order to provide the services in the Agreement. The customer can always see People-People's sub-data processors on People-People's website, where People-People also informs about changes in the choice of sub-data processors.
6.2	People-People varsler Kunden om udskiftninger i underdatabehandlerne snarest muligt.	People-People notifies the Customer regarding changes in sub-processors as soon as possible.
6.3	Såfremt Kunden ikke ønsker, at People-People anvender en ny underdatabehandler som varslet, jf. pkt. 6.2, skal Kunden gøre skriftlig indsigelse til People-People mod anvendelsen af sådan ny underdatabehandler uden ugrundet ophold efter at være blevet bekendt med udskiftningen.	In so far as the Customer does not wish People-People to use a new sub-processor as notified in clause 6.2, the Customer must object in writing against the application of this sub-processor without undue delay after the application is brought to the Customers attention.
6.4	Gør People-People brug af en under- databehandler i forbindelse med udførelse af specifikke behandlingsaktiviteter på vegne af Kunden, pålægges underdatabehandler de	If People-People makes use of a sub- processor in connection with the execution of specific processing activities on behalf of the Customer, the sub-processor shall be subject

	samme databeskyttelsesforpligtelser som dem, der er fastsat i databeskyttelses- forordningens artikel 28.	to the same data protection obligations as those set out in article 28 of the General Data Protection Regulation.
6.5	Hvis underdatabehandler, som nævnt under punkt 6.4, ikke opfylder sine databeskyttelses- forpligtelser, forbliver People-People fuldt ansvarlig over for Kunden for opfyldelsen af den underdatabehandlers forpligtelser.	If the sub-processor, as mentioned under 6.4, does not fulfil its data protection obligations, People-People will remain fully liable to the Customer for the fulfilment of the sub- processor´s obligations.
7	Tilsyn	Audit
7.1	People-People stiller alle oplysninger, der er nødvendige for at påvise overholdelse af kravene i databeskyttelsesforordningens artikel 28 til rådighed for Kunden.	People-People makes available to the Customer all information necessary to demonstrate compliance with the obligations laid down in Article 28 of the General Data Protection Regulation.
7.2	People-People giver med 30 dages varsel mulighed for og bidrager til revisioner, herunder inspektioner, der foretages af Xxxxxx eller en anden revisor, som er bemyndiget af Kunden.	People-People provides and contributes within 30 days to audits, including inspections conducted by the Customer or another auditor mandated by the Customer.
7.3	People-People underretter omgående Kunden, hvis en instruks vedrørende Punkt 7.1 eller 7.2 efter People-Peoples mening er i strid med Databeskyttelsesforordningen eller databeskyttelsesbestemmelser i anden EU-ret eller medlemsstaternes nationale ret.	People-People notifies the Customer immediately if an instruction as provided under clause 7.1 or 7.2 in People-People´s opinion infringes the General Data Protection Regulation or other Union or Member State data protections provisions.
7.4	People-People er berettiget til særskilt honorering for bistand, der følger af punkt 7.1 og 7.2 ovenfor i overensstemmelse med det til enhver tid gældende timesatser, som anført under punkt 2.4.2 i Abonnementsvilkårene.	People-People is entitled to separate remuneration for assistance resulting from point 7.1 and 7.2 above in accordance with the hourly rates applicable at any time, as stated under point 2.4.2 of the Subscription Terms.
7.5	For det tilfældes skyld, at Xxxxxx ønsker revisionserklæringer eller anden tredjemandsvurdering, afholder Xxxxxx alle direkte relaterede udgifter hertil.	Insofar the Customer requests audit statements or other third-party assessment, the Customer bears all directly related expenses.
8	Aftalens ophør	Termination of processing
8.1	People-People tilbageleverer alle personoplysninger, efter at tjenesten vedrørende behandlingen er ophørt, og sletter alle eksisterende kopier.	People-People deletes or returns all the personal data to the Customer, at the choice of the Customer, after the end of the provision of services relating to processing.
8.2	People-Peoples sletnings- og tilbageleveringsforpligtelse, som følger af	People-People´s obligation to return and delete data as put forth in clause 8.1 will not

	Punkt 8.1 frafalder, såfremt EU-retten eller Medlemsstaternes nationale ret foreskriver opbevaring af personoplysningerne.	be asserted if Union or Member State law requires People-People to store the personal data.
8.3	People-People dokumenterer uden ugrundet ophold over for Kunden, hvilke regler i EU- retten eller medlemsstaternes nationale ret, der foreskriver opbevaring af person- oplysningerne, som nævnt under Punkt 8.2.	People-People documents without undue delay to the Customer which Union or Member State law requires storage of personal data as mentioned in clause 8.2.
9	Ændringer	Changes and effect
9.1	Lovpligtige ændringer indføjes af People- People og Kunden underrettes herom snarest muligt. Sådanne ændringer påvirker ikke gyldigheden af de allerede indgåede aftaler, og kræver heller ikke at den tilpassede aftale underskrives på ny.	Regulatory changes must be adhered to by People-People and communicated to the Customer as soon as possible. Such changes do not influence or change the legality or legitimacy of agreements already entered into by the parties and do not necessitate the formalisation of a new agreement signed by the parties.