Question 116 · PDPL, GDPR & privacy
Who documents lawful basis?
The controller. Innovito processes on documented instructions. HR/compliance training often uses legitimate obligation or employment basis — your counsel names it.
Tender bullet
Lawful basis is the controller’s documentation, not a vendor slogan.
Paste into the questionnaire annex
Related tender questions
Educational and evidentiary material for procurement and IT evaluators. Adapt with your legal, privacy, and information-security counsel. Commercial terms, SLAs, and certificate serials are confirmed in the bid — not invented on this page.