DNB purchases services of third parties. In some cases these third parties may receive personal data from DNB. For this the third party may be processor or controller.

In all cases DNB will enter into an agreement with these parties in which responsibilities ensuing from GDPR will be agreed. Employees of third parties providing services which get access to information or value (of DNB) may be screened. The processing of personal data of a contractor reporting to a DNB manager will be the same as that for an employee.

For significant or high risk purchases an investigation may be performed as per the law Bibob.