The Order processing plays a central role in data protection management, as personal data is often not only processed internally but also passed on to third parties. External service providers be passed on. After Art. 28 GDPR controllers must ensure that their processors take appropriate data protection measures and that processing is carried out exclusively within the scope of the agreed purposes.

After Art. 30 GDPR companies are obliged to document all relevant information in the VVT. This applies in particular to cases in which personal data of Processed on behalf of third parties become. The documentation of the circumstances of the order processing is crucial for several reasons:

• Legal obligation to provide evidence:
  Companies must be able to prove to supervisory authorities at any time which service providers they have commissioned and under which conditions the data processing takes place.
• Transparency and control:
  Clear documentation in the VVT ensures that those responsible always have an overview of external processors and their Contract compliance and security measures regularly.
• Minimise data protection and security risks:
  By systematically recording order processing, potential risks can be minimised. Risks recognised at an early stage for example, inadequate security measures by the service provider or processing in a third country without an adequate level of data protection.
• Compliance with accountability:
  Companies must prove that they fulfil their obligations under the GDPR. This includes concluding a data processing agreement with each processor. Order processing contract (AVV) which regulates the data protection requirements.
• Security of data subject rights:
  Persons whose data is processed have various rights under the GDPR (e.g. information, erasure). The documentation of order processing helps to fulfil these requests to answer quickly and preciselyby knowing which service providers are involved and where the data is located.

Anyva facilitates the management of order processing by comprehensively documenting the service providers involved, their security measures and contractual framework conditions. The integrated contract check makes it easier to audit your own contracts and those sent to you for completeness and legal "traps".

Audits can be repeated and documented regularly (PDCA).