Appendix A – Information about the processing
A.1.1. The purpose of the data processor's processing of personal data on behalf of the data controller
A.1.1.1 Hosting and operation
The purpose of the processing is to provide hosting and operation of the data controller's IT systems, including backup, monitoring, maintenance and support as further specified in the Service Agreement between the parties. This includes specific tasks requested by the data controller.
A.1.2 The data processor's processing of personal data on behalf of the data controller shall mainly pertain to (the nature of the processing)
A.1.2.1 Hosting and operation
The data processor will provide hosting and operation of the data controller's IT systems. Thus, the primary purpose of processing of personal data is hosting, including storage of the data controller's personal data, and day-to-day operation, including monitoring, backup and maintenance of the data controller's IT systems containing personal data.
In specific situations, processing may include organisation, structuring, facilitation, temporary storage, filtration, troubleshooting, adaptation or alteration, retrieval, consultation, use, alignment, combination, restriction or erasure of personal data when so required in connection with the data processor's supply of Services to the data controller, or if so, required in order to comply with a specific request from the data controller.
A.1.3. The processing includes the following types of personal data about data subjects
The nature of the processing activities provided by the Data Processor to the Data Controller does not make it possible to specify exactly which types of personal data are involved in the processing.
Unless the Data Controller specifies the exact types of personal data below, it is therefore agreed that the Data Processor shall process the types of personal data that the Data Controller stores in the systems and services provided by the Data Processor.
Types of personal data specified below:
A.1.4. The processing includes the following categories of data subjects
The nature of the processing activities provided by the Data Processor to the Data Controller does not make it possible to specify exactly which categories of data subjects are involved in the processing.
Unless the Data Controller specifies the exact categories of data subjects below, it is therefore agreed that the Data Processor shall process the categories of data subjects that the Data Controller processes in the systems and services provided by the Data Processor.
Categories of data subjects specified below:
