Cession of data of the professionals vaccinated against the COVID19

From the point of view of the regulations of data protection, if the Service of Occupational Risk Prevention of an entity makes the vaccination of the professional staff of another entity on account of this, the treatment of the particulars of the professionals, once the state of vaccination has been included, requires the formalization of an order of the treatment between both institutions in the terms of the item 28.3 of the RGPD.