Oracle maintains lists of oracle affiliates and subprocessors that can process personal data from services. For more information, please contact My Oracle Support (support.oracle.com) Document ID 2121811.1 or any other main support tool applicable to services. You can check the current privacy and security policy for Oracle NetSuite products. Many of these guidelines are available on this and other link and provide a strong framework for privacy and security, which applies even after the implementation of the DMPR. For example, the oracle cloud data processing agreement contains clear guidance on intent and limitation of use, is tailored to security, security breaches and security clauses, and contains security clauses in international data transmission. The information contained in this document serves only as a consultation guide and cannot be construed as valid legal assistance with respect to the content, interpretation or application of the RGPD, the DSP, the NIS or any other regulation. We recommend that our clients contact the Information Office (ICO) or specialized legal advice to understand the scope and applicability of the regulations and all laws or regulations relating to the processing of personal data, including the use of services and products provided by suppliers. (i) that the processing services of the subcontractor processor be performed in accordance with Point 11; Data collection must be specific, explicit and legitimate and be limited to what is needed to achieve the goal. (i) that, in the case of a subcontract in point 11, the processing activity is carried out by a subcontractor offering at least the same level of protection for personal data and the rights of the person concerned as the importer of data in accordance with the clauses; And Article 7 mediation and jurisdiction 1. The data importer accepts that the data importer accepts the decision of the person concerned to refer the dispute to mediation by an independent person or, if necessary, by the supervisory authority, where the person concerned asserts third-party rights against him and/or seeks damages under the terms: (a) refer the dispute to mediation by an independent person or, if necessary, by the supervisory authority; to refer the dispute to the courts of the Member State in which the data exporter is based.