DPA - Data Processing

Annex A: Personal Data Processing

Detailed overview of how personal data is processed under the DPA.

Data Processing Agreement

Annex A: Description of the processing of Personal Data

Last modified: October 2, 2023

The Supplier performs services to the Customer that will include processing of Personal Data by Supplier as further specified below with respect to: (a) the nature and purpose of the processing of Personal Data; (b) the type of Personal Data and categories of Data Subjects; (c) the applicable security measures; (d) duration of the processing, as further agreed below.

(a)           Nature and purpose of the processing of Personal Data

The Supplier processes personal data on behalf of the Customer in relation to the Supplier’s services relating to its Software as a Service (SaaS) application according to the Agreement insofar as the services require processing of personal data.

(b)           Type of Personal Data and categories of Data Subjects

The type of personal data is data subjects’ contact information such as name and email address. The categories of data subjects are the the Customer’s named users of the Supplier’s Software as a Service (SaaS) application, such as Customer’s employees or contractors.

(c)            Applicable security measures

The information security instructions are set out in Section 8 (Security of Data Processing) of this DPA.

(d)           Duration of the processing of Personal Data

The Supplier processes personal data on behalf of the Customer during the term of the Service Agreement and after termination for the actions required after termination of the Agreement under the Agreement, its attachments, this DPA and its annexes.