Appendix A.1 – Information about the processing
Download as PDF
A.1.1. The purpose of the data processor's processing of personal data on behalf of the data controller
A.1.1.7 Security services
The purpose of the processing is the provision of security services to the data controller. The delivery includes e.g. managed or unmanaged Security Information and Event Management (SIEM), penetration testing or incident management after a security breach.
A.1.2 The data processor's processing of personal data on behalf of the data controller shall mainly pertain to (the nature of the processing)
A.1.2.7 Security services
The data processor carries out monitoring, setup, reporting, penetration testing, incident management after security breach, which are further specified in the Service Agreement concluded between the parties.
A.1.3. The processing includes the following types of personal data about data subjects
General personal data (cf. Article 6 of the General Data Protection Regulation):
☒ Name
☒ Address
☒ Email
☒ Phone number
☒ Financial information
☐ Other personal data as specified
… Specify other categories
Sensitive personal data (cf. Article 9 of the General Data Protection Regulation):
☒ Racial or ethnic background
☒ Political opinion
☒ Religious beliefs
☒ Philosophical beliefs
☒ Trade union membership
☒ Health issues, including abuse of medicine, narcotics, alcohol, etc.
☒ Sexual matters
Information about the private life of individuals (cf. Article 8 of the Danish Data Protection Act):
☒ Criminal matters
☒ Relevant social problems
Other information about purely private matters not mentioned above:
☒ Other private matters
Information about National Identification Number (CPR) (cf. Article 11 of the Danish Data Protection Act):
☒ National Identification numbers (CPR)
A.1.4. The processing includes the following categories of data subjects
Categories of data subjects, identified or identifiable natural persons comprised by the data processor's processing:
☒ Employees
☒ Children
☒ The data controller's own customers
☐ Other categories as specified.
… Specify other categories
