the processing of private data in regard into the routines of the establishment of a controller or a processor within the EU, whether the processing normally takes position while in the EU; andutilizing correct technological and organizational steps to safeguard own data towards accidental, unlawful destruction, or accidental reduction, alteration,