Commissioned Data Processing and TOM

We provide our customers (clients) with an agreement on commissioned processing of personal data in accordance with Art. 4 No. 8 and Art. 28 of Regulation (EU) 2016/679 - General Data Protection Regulation (GDPR). This simplifies the review process for us and thus shortens the processing time.

And this is how it works:

  1. download the fillable standard agreement as a PDF file.
  2. fill in the fields in your PDF viewer (e.g. Adobe Acrobat)
  3. send the signed agreement to
  4. after the contract has been checked, you will receive the countersigned agreement including the individual attachment to the contract for commissioned processing.

We have provided the following files for you to download:

  • Commissioning Data Agreement
  • Annex 1 incl. TOM - Technical Organisational Measures

You can download the files here:

The responsible body for data processing is:

Neue Weilheimer Str. 14
D-73230 Kirchheim unter Teck

Telephone: +49 7021 92846-0

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Revoking your consent to data processing.

Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to complain to the competent supervisory authority.

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link:

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Data protection officer required by law

We have appointed an external data protection officer for our company.

Aurenz GmbH
Mr. Jürgen Dagutat
Hans-Böckler-Str. 29
D-73230 Kirchheim unter Teck

Telephone: +49 7021 73888-0