Question 116 · PDPL, GDPR & privacy

Who documents lawful basis?

The controller. Innovito processes on documented instructions. HR/compliance training often uses legitimate obligation or employment basis — your counsel names it.

Tender bullet

Lawful basis is the controller’s documentation, not a vendor slogan.

Paste into the questionnaire annex

Related tender questions

Educational and evidentiary material for procurement and IT evaluators. Adapt with your legal, privacy, and information-security counsel. Commercial terms, SLAs, and certificate serials are confirmed in the bid — not invented on this page.