10. Third Party Processing
We do on occasion ask external agencies or companies to carry out processing of personal data on our behalf. While such bodies are now also subject to detailed requirements regarding those processing activities, we are also under an obligation to ensure that those third parties are able to provide sufficient guarantees that their processing complies with legal requirements and protects the rights of an individual.
We will therefore ensure that there is a contract in place with any third party processors which complies with the legal requirements governing how a third party carries out the processing on our behalf.
We will endeavour to use only those third party processors who have signed up to and adhere to any relevant code of practice or certification scheme relevant to the processing activities they will be carrying out.
All contracts with third parties for the processing of personal data will be reviewed by the Data Protection Officer or SIRO to ensure it meets the relevant requirements.