According to the EU General Data Protection Regulation (GDPR), every controller that has personal data processed on its behalf must conclude a data processing agreement (DPA).
Since you use oneVcard to store the personal data of your employees in the cloud, the GDPR also applies to you. You must legally secure this in accordance with Art. 28 GDPR.
For this reason, you or the person responsible in your company concludes a contract with usoneVcard GmbH) for order processing:
Conclude a contract for order processingAccording to the EU General Data Protection Regulation (GDPR), every responsible body that has personal data processed on its behalf must conclude a contract for commissioned processing.
Since you store the personal data of your employees in the cloud with oneVcard, the GDPR also affects you. You must legally secure this according to Art. 28 GDPR.
For this reason, you or the responsible person in your company will conclude a contract with usoneVcard GmbH) for order processing:
Conclude DPA (English)