Where personal data of data subjects will be processed within the operations/services that will be offered as part of a contract, this would need to be regulated through a separate agreement. A detailed definition of these contract relationships is available in the document Data Protection Contract Relationships.
Templates for such agreements include:
- Data Processing Agreement
The Privacy Notice for Entities exchanging information with Enemalta plc provides more information on the type of data that Enemalta plc processes in relation to natural persons and/or companies that exchange information in different ways with Enemalta plc, for instance, because of a contractual agreement between the two parties. Within this notice, there is also information about the data subject rights, purposes of processing, Enemalta’s lawful bases of such processing, recipients and transfers of personal data, and measures to keep the personal data secure.