Appendix A – Information about the processing

A.1.1. The purpose of the data processor's processing of personal data on behalf of the data controller

A.1.1.1 Hosting and operation

The purpose of the processing is to provide hosting and operation of the data controller's IT systems, including backup, monitoring, maintenance and support as further specified in the Service Agreement between the parties. This includes specific tasks requested by the data controller.

A.1.2 The data processor's processing of personal data on behalf of the data controller shall mainly pertain to (the nature of the processing)

A.1.2.1 Hosting and operation

The data processor will provide hosting and operation of the data controller's IT systems. Thus, the primary purpose of processing of personal data is hosting, including storage of the data controller's personal data, and day-to-day operation, including monitoring, backup and maintenance of the data controller's IT systems containing personal data.

In specific situations, processing may include organisation, structuring, facilitation, temporary storage, filtration, troubleshooting, adaptation or alteration, retrieval, consultation, use, alignment, combination, restriction or erasure of personal data when so required in connection with the data processor's supply of Services to the data controller, or if so, required in order to comply with a specific request from the data controller.

A.1.3. The processing includes the following types of personal data about data subjects

General personal data (cf. Article 6 of the General Data Protection Regulation):
☒ Name
☒ Address
☒ Email
☒ Phone number
☒ Financial information
☐ Other personal data as specified
… Specify other categories

Sensitive personal data (cf. Article 9 of the General Data Protection Regulation):
☒ Racial or ethnic background
☒ Political opinion
☒ Religious beliefs
☒ Philosophical beliefs
☒ Trade union membership
☒ Health issues, including abuse of medicine, narcotics, alcohol, etc.
☒ Sexual matters

Information about the private life of individuals (cf. Article 8 of the Danish Data Protection Act):
☒ Criminal matters
☒ Relevant social problems

Other information about purely private matters not mentioned above:
☒ Other private matters

Information about National Identification Number (CPR) (cf. Article 11 of the Danish Data Protection Act):
☒ National Identification numbers (CPR)

A.1.4. The processing includes the following categories of data subjects

Categories of data subjects, identified or identifiable natural persons comprised by the data processor's processing:
☒ Employees
☒ Children
☒ The data controller's own customers
☐ Other categories as specified.
… Specify other categories