Appendix A – Information about the processing
A.1.1. The purpose of the data processor's processing of personal data on behalf of the data controller
A.1.1.3 Consultancy services
The purpose of the processing is to carry out specifically agreed consultancy tasks. Consequently, the purpose will vary, but will always be related to an agreed consultancy task.
A.1.2 The data processor's processing of personal data on behalf of the data controller shall mainly pertain to (the nature of the processing)
A.1.2.3 Consultancy services
The data processor will carry out specific and limited tasks. Consultancy tasks are carried out in the data controller's systems and with the data controller's data, and the processing will be defined for each specific task.
Tasks are requested and defined by the data controller, and the data processor will assist to the extent required in order to ensure a proper definition of tasks.
A.1.3. The processing includes the following types of personal data about data subjects
General personal data (cf. Article 6 of the General Data Protection Regulation):
☒ Name
☒ Address
☒ Email
☒ Phone number
☒ Financial information
☐ Other personal data as specified
… Specify other categories
Sensitive personal data (cf. Article 9 of the General Data Protection Regulation):
☒ Racial or ethnic background
☒ Political opinion
☒ Religious beliefs
☒ Philosophical beliefs
☒ Trade union membership
☒ Health issues, including abuse of medicine, narcotics, alcohol, etc.
☒ Sexual matters
Information about the private life of individuals (cf. Article 8 of the Danish Data Protection Act):
☒ Criminal matters
☒ Relevant social problems
Other information about purely private matters not mentioned above:
☒ Other private matters
Information about National Identification Number (CPR) (cf. Article 11 of the Danish Data Protection Act):
☒ National Identification numbers (CPR)
A.1.4. The processing includes the following categories of data subjects
Categories of data subjects, identified or identifiable natural persons comprised by the data processor's processing:
☒ Employees
☒ Children
☒ The data controller's own customers
☐ Other categories as specified.
… Specify other categories
