E-021 ยท Institution responses
Institution response 02
Second written response: contractual legal basis, processor acting on behalf of the controller, consent not required for processing necessary for the stated purpose, access controls.
Public redacted edition