§ 15 DSG LSA
Automated procedures, joint filing systems,
(1)contractual obligations
(2)The establishment of an automated retrieval procedure or of a joint automated filing system in or from which several data processing bodies process personal data shall be permissible insofar as this is appropriate having regard to the rights and freedoms of the data subjects and the tasks of the participating bodies, and risks for the rights and freedoms of the data subjects can be avoided through technical and organisational measures.
(3)Where personal data are processed on behalf of a controller by another body and the provisions of this Act are not applicable to the processor, the controller shall be obliged to ensure by contract that the processor complies with the provisions of this Act and submits to supervision by the State Commissioner for Data Protection. zur Einzelansicht § 15