(b) `data exporter` means the controller who transmits the personal data; 11.1. This DPA is subject to the laws set out in the main contract. Appendix I – Details of personal data processing A written agreement defines the purpose and parameters of the data processing and specifies the roles and responsibilities between the UW and a third party. Description of the technical and organisational security measures implemented by the data importer in accordance with clauses 4(d) and 5(c) (or the attached document/law): 1. The data exporter undertakes to deposit a copy of this contract with the supervisory authority if it so wishes or when such deposit is required by current data protection legislation. 1.1. If the university entrusts a third party with the provision of a service on its behalf, which involves the disclosure and use of personal data in connection with the service (e.g. B a consultant, shipping company, software provider, data hosting or analysis service or other service provider that processes the university`s personal data on its behalf), the university must have a written contract (data processing contract) to ensure that such personal data is properly protected. The GDPR imposes specific requirements on the content of such agreements. (a) `personal data`, `specific categories of data`, `processing/processing`, `controller`, `processor`, `data subject` and `supervisory authority` shall have the same meaning as in Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; The presentation of the university`s data processing agreement is available here: e) Assist the organization in complying with the organization`s data protection obligations in accordance with art. . . .