Appendix A – Information about the processing

A.1.1. The purpose of the data processor's processing of personal data on behalf of the data controller

A.1.1.4 Database administration

The purpose of the processing is to perform administration tasks on the data controller’s databases and database servers. This includes administration of tables, jobs, performance optimization, configuration of backup, database storage configuration and similar tasks further specified in the Service Agreement regarding supply of Services entered into between the parties. This includes specific tasks requested by the data controller.

A.1.2 The data processor's processing of personal data on behalf of the data controller shall mainly pertain to (the nature of the processing)

A.1.2.4 Database administration

The data processor provides administration of the data controller’s databases and servers. The primary purpose of processing is administration, optimization, maintenance, monitoring and troubleshooting on the data controller’s databases containing personal data.

The primary purpose of processing is not to process personal data, but while carrying out the obligations as data processor in specific situations, processing in the data controller’s databases may include organization, structuring, facilitation, temporary storage, filtration, troubleshooting, adaptation or alteration, retrieval, consultation, use, alignment, combination, restriction or erasure of personal data when so required in connection with the data processor's supply of Services to the data controller, or if so required in order to comply with a specific request from the data controller.

A.1.3. The processing includes the following types of personal data about data subjects

General personal data (cf. Article 6 of the General Data Protection Regulation):
☒ Name
☒ Address
☒ Email
☒ Phone number
☒ Financial information
☐ Other personal data as specified
… Specify other categories

Sensitive personal data (cf. Article 9 of the General Data Protection Regulation):
☒ Racial or ethnic background
☒ Political opinion
☒ Religious beliefs
☒ Philosophical beliefs
☒ Trade union membership
☒ Health issues, including abuse of medicine, narcotics, alcohol, etc.
☒ Sexual matters

Information about the private life of individuals (cf. Article 8 of the Danish Data Protection Act):
☒ Criminal matters
☒ Relevant social problems

Other information about purely private matters not mentioned above:
☒ Other private matters

Information about National Identification Number (CPR) (cf. Article 11 of the Danish Data Protection Act):
☒ National Identification numbers (CPR)

A.1.4. The processing includes the following categories of data subjects

Categories of data subjects, identified or identifiable natural persons comprised by the data processor's processing:
☒ Employees
☒ Children
☒ The data controller's own customers
☐ Other categories as specified.
… Specify other categories