Insofar as the related main contract(s) concerns the provision of EDI services, no structured categories of data are processed by the Processor, with the exception of customer employee data in the context of onboarding, especially since the Processor provides free text fields which the Controller fills in with its (personal) data. Accordingly, the Controller decides on the categories of data subjects processed.

Providing EDI / e-invoicing services; data processing of our employees at ecosio

Insofar as the related main contract(s) concerns the provision of EDI services, no structured categories of data are processed by the Processor, with the exception of customer employee data in the context of onboarding, especially since the Processor provides free text fields which the Controller fills in with its (personal) data. Accordingly, the Controller decides on the categories of data subjects processed.

When using ecosio's EDI system, generally no personal data are processed. However, the ecosio EDI system allows for the entry of information in text fields that may represent personal data. For this reason, ecosio may become a Processor within the meaning of Art. 28 GDPR.

The object and purpose of the contract is the provision of IT services as software-as-a-service (SaaS). More detailed specifications shall be set out in the associated main contract(s).