"
In respect of any Personal Data to be processed by the
Company acting as Data Processor pursuant to this
Agreement for
which the Customer is Data Controller, the Data
Processor shall: 3.1.1. provide appropriate technical
and organisational
measures in such a manner as is designed to ensure the
protection of the rights of the data subject and to
ensure a
level of security appropriate to the risk; 3.1.2. only
engage sub-processors where necessary to fulfil any
requests of
the Data ..."
