# GDPR Recital 109

General Data Protection Regulation (GDPR), version 2026.1, in force since 25 May 2018. Read from https://publications.europa.eu/resource/celex/32016R0679. Each clause starts with its key, which is how to cite it.

## gdpr-recitals:rec-109

The possibility for the controller or processor to use standard data-protection clauses adopted by the Commission or by a supervisory authority should prevent controllers or processors neither from including the standard data-protection clauses in a wider contract, such as a contract between the processor and another processor, nor from adding other clauses or additional safeguards provided that they do not contradict, directly or indirectly, the standard contractual clauses adopted by the Commission or by a supervisory authority or prejudice the fundamental rights or freedoms of the data subjects. Controllers and processors should be encouraged to provide additional safeguards via contractual commitments that supplement standard protection clauses.

Page: https://dpolens.com/laws/gdpr/rec-109