As you are aware there are key principals for the processing of personal data under the GDPR and it clearly lays out the obligations of the Controller. It also specifies that any processing of personal data by a Processor on behalf of the Controller, should be governed by a contract with certain provisions included.
This will involve both your organisation and ours updating our existing contract terms and conditions via the attached addendum and you are deemed to agree with this schedule which clarifies the roles and responsibilities between our organisations with your business as the Data Controller and Weatherglaze Systems Limited as the Data Processor.
Should you have any questions on the attached or above please just let me know.
Paula Carney-Hoffler Dip Law,CDPP(IE273)
Data Protection Officer
Weatherglaze Systems Limited