Certificates and use of symbols
Our certificates create trust
Welcome to the PwC Cert certification page. Our contact button provides you with all the important information about the services and management systems we certify. Here you can learn more about:
- the certified companies
- the type of certified service or management system
- the scope of the certified service or management system
- the certification criteria including the issue date
- the certification mark we may have awarded
- the certificate number
- the certificate’s validity period
- and, if included in the certification, a data sheet/brief report with additional important information about the certification
You can find our valid AUDITOR (GDPR CC) data protection certificates here.
Use of Marks
The AUDITOR certification provides proof of the conformity of data processing operations of cloud providers with the requirements of the EU General Data Protection Regulation (GDPR).
Use of the Marks
After successful certification by PwC Certification Services GmbH, our following guidelines will help you correctly use the certification mark applicable to your company. The certification mark can be used on your company’s correspondence (including letterhead, email signature), information, and press material.
Please avoid changes to the color or distorting the proportions. The mark may only be used in the combination listed. In exceptional cases, the dimensions may be reduced, for example, due to space restrictions or cost reasons.
However, the marks must remain easily legible. Separate “binding specifications for the use of the mark” apply to AUDITOR certification, which you can download as a document below.
Misuse of the Mark
It is not permitted to depict the mark on company buildings, flags, vehicles, packaging, or products. The same applies to publication in any way that could be interpreted as a mark of product conformity.
This also applies to items that your company uses exclusively for advertising purposes (e.g. calendars). Likewise, the certification mark may not be used on accompanying documentation such as laboratory test reports, calibration certificates, or inspection reports. It must not be implicitly suggested that the certification applies to activities that lie outside the scope of the certificate.
The correct use of the mark is part of the contractual terms and conditions. Obvious and/or persistent misuse of the certification mark may be considered grounds for suspension and/or revocation of the certificate.
The issue and publication of materials containing the certification logo must be discontinued immediately in the event of a certificate of suspension, revocation, or termination of the contract. In these cases, the certificate must be made directly available to the public. Following a certificate of revocation, there must be no appearance of existing certification by PwC Certification Services GmbH.
Prohibition of use of the DAkkS accreditation symbol
Attention: The accreditation symbol of the German Accreditation Body DAkkS may not be used by our customers under any circumstances.
Questions and information as well as reporting of symbol misuse
If you require further information on the proper use of symbols, please feel free to contact us at any time.
Documents
Appeals and complaints
General
Appeals and complaint procedures are open to all interested parties who wish to appeal for a certification decision or lodge a complaint. They serve to systematically process individual appeals/complaints and, through the implementation of appropriate measures and statistical recording of incoming appeals/complaints, to improve PwC Cert’s management system, thereby strengthening overall confidence in the certification of services and management systems, as well as in PwC Certification Services GmbH as a whole.
Our certification body therefore has a documentation procedure for receiving, evaluating, and deciding on appeals and complaints. The following basic requirements are implemented when processing appeals and complaints:
- We handle appeals and complaints in close dialogue with the certificate holder (in writing and, if necessary, through meetings). After hearing the parties, we prepare a reasonable decision and make it available to all affected parties.
- Information about appeals and complaints is treated confidentially and will not be published.
Appeals to certification decisions
An objection represents a request by the objecting party (customer) to the certification body to review its decision regarding the subject matter of certification. The following circumstances may be relevant:
- Rejection of a certification application
- Composition of the audit team
- Refusal to continue a certification audit
- Request to implement measures
- Approved audit report
- Certification decision (including suspension, restriction and revocation of certificates
- Changes to the requested scope of application
- Audits ordered for special reasons
- Response to a complaint
However, appeals can only be directed against certification decisions made by the certification body.
Note: When issuing certifications, the data protection supervisory authority can instruct the certification body not to issue a certification (see Article 58 (2) (h) variant 3 GDPR).
The submission, investigation and decision on appeals must not disadvantage the objecting party.
The certification body is responsible for collecting and verifying all necessary information to validate the appeal.
All appeals must be addressed to the management of the certification body no later than four weeks after the certification decision. For traceability, an appeal by the complainant must in any case be submitted to PwC Certification Services GmbH in writing or by email, stating all necessary information and documents.
Receipt of an appeal
The receipt of the appeal will be confirmed to the complainant by the employee responsible within 14 days of receipt of the appeal.
If an appeal is obviously unfounded or if the certification body is not responsible, the appeal will be rejected and the complainant informed accordingly.
All appeals are recorded, processed, and evaluated centrally.
Root cause analysis, evaluation, and corrective measures
The evaluation and decision on appeals are carried out only by the person who did not make the decision against which the appeal was submitted.
To further ensure that there is no conflict of interest, staff, including those in a management position, may not be deployed by the certification body to evaluate or approve the resolution of a complaint or appeal if they have been involved in consulting or employment with the client within the last two years.
The reasons stated for the appeal will be evaluated. If necessary, additional information will be requested from the appellant.
If necessary, further measures (e.g. a re-audit) can be carried out by an auditor who has not previously been involved in the audit.
In addition, the program owner can be called upon to clarify appeals if, for example, there is uncertainty regarding certification requirements or certification criteria. The program owner will check whether they can contribute appropriate information or resources to clarify the matter. There is no obligation on the part of the program owner to provide support.
After collecting and verifying all necessary information and depending on the scope, extent, criticality and complexity of the objection, the certification body will decide on the objection, if possible, within six weeks. Longer deadlines are possible and should be agreed upon bilaterally between the certification body and the appellant.
Inform the appellants and other parties involved
Upon request from the appellant or another party involved, the management of the certification body will provide information on the status of the objection processing.
The certification body will formally notify the appellant and all other parties involved in the conclusion and outcome of the objection procedure. In the letter, the certification body will provide the appellant with evidence that a separation of personnel between objection processing and certification activities has been ensured.
If the appellant does not agree with the decision, they have legal recourse.
In addition, the certification body reports, among other things, in its annual report to the program owner and the certification body’s Impartiality Committee (UPA) by means of a summary of the main reasons for appeals.
Upon request, the certification body will provide, in accordance with Art. 43 (2) GDPR (see DSK Section 4.6, EDPB Annex 1 Section 4.6), not only the structure and procedures for handling appeals by the certification body, but also relevant information on individual incidents.
Impact on the continuous improvement process
In the case of justified appeals, the management of the certification body-service provider initiates corrective measures. These are documented in the certification body-service action plan. Measures that optimize the certification process are reviewed for their effectiveness in the annual internal audit and management review.
Complaints (Reclamations)
A complaint is an expression of dissatisfaction, which requires a response -but in a different sense than an objection – from any person or organization (complainant) against a certification body regarding its activities. This can include, for example, a complaint from the complainant regarding dissatisfaction, deficiencies, or errors in the handling of procedures or other activities, against the certification body, or against a client of the certification body.
A complaint can be submitted by any interested party.
The rule for handling appeals applies analogously, the separation of personnel to avoid conflicts of interest and independence.
