Information Pursuant to Article 28 of the Data Act

Information from RX-WATERTEC GmbH, Kreativpark Karlsruhe, Alter Schlachthof 47, 76131 Karlsruhe, pursuant to Article 28 of Regulation (EU) 2023/2854 (“Data Act”) regarding the VUE.RX data processing service

1. Jurisdiction of the ICT Infrastructure
The ICT infrastructure used for VUE.RX is operated in Amazon Web Services data centers in the Frankfurt am Main region (Germany), including data backups within the EU. The applicable jurisdiction with respect to the infrastructure used is the Federal Republic of Germany; the law of the European Union and its member states applies.

2. Measures Against Unlawful International Governmental Access
RX-WATERTEC has implemented the following technical, organizational, and contractual measures to prevent international governmental access to non-personal data stored in the EU or the transfer of such data, to the extent that such access would conflict with Union law or the law of the relevant Member State:

• Technical measures: Hosting exclusively in data centers within the EU (AWS Frankfurt Region); logical separation of customer environments; encryption of data during transmission and storage; restrictive, logged access control based on the need-to-know principle.
• Organizational measures: Internal process for handling requests from public authorities: review of the legal basis, review of compliance with EU law and the law of the relevant Member State, and challenging requests that violate these requirements or exceed the requesting authority’s powers.
• Contractual measures: Requiring hosting and infrastructure providers to comply with applicable EU law and—to the extent legally permissible—to provide information regarding government access requests; Standard Contractual Clauses (SCCs), where applicable.
• Transparency: Unless prohibited by law, RX-WATERTEC will promptly inform affected customers of such a request and the data involved.