Description of the Processing Operations. This Exhibit specifies the subject-matter of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects. The parties may provide further details in the Agreement if required for a particular Offering. Subject matter, nature and purpose of the processing Siemens and its Subprocessors will Process Personal Data to provide the Offerings, including: • internet accessible or similar Offerings made available and hosted by Siemens (“Cloud Offerings”); or • administration, management, installation, configuration, migration, maintenance and support Offerings or any other Offerings requiring (remote) access to Personal Data stored in the Cloud Offerings or on Customer’s IT systems (“Support and Professional Offerings”). Data Subjects The Personal Data Processed concerns the following categories of Data Subjects: Data Subjects include: • employees, • contractors, • suppliers, • business partners; and • other individuals whose Personal Data is stored on the Offerings and/or is Processed in the context of providing the Offerings. Categories of data The Personal Data Processed concerns the following categories of personal data: • contact and user information, including name, phone number, email address, time zone, and address data; • system access, usage, authorization data, operating data and any system log-files containing Personal Data or any other application-specific data which users enter into the Offerings; and • where applicable further Personal Data as determined by Customer and its Further Controllers by uploading or connecting it to the Offerings or otherwise granting access to it via the Offerings.
Description of the Processing Operations. Processing of the charging transactions and transactions taking place through multifunctional printers, vending machines and cash registers of data subjects. Categories and types of personal data Depending on the services and functionalities used by the data subject, we may, among other things, process the following personal data from the data subject: identification details, such as name, surname, gender and date of birth; contact information, such as (email) address and (mobile) telephone number; transaction details, such as credit and debit transactions; financial details, such as bank account number (in case the data subject wishes to request a refund); information about online behaviour and preferences, such as the IP address of the mobile device or computer and the pages visited by the data subject on the website or in Xafax's apps; information shared by the data subject with our contact services, correspondence with Xafax and support data (telephone, chats and email). All data processed by Xafax is not of a special nature. Categories of data subjects Students/pupils Parents/Guardian Employees Guests Processing purposes We use the personal data of the data subject for the following purposes: to give data subjects access to their account, offer data subjects the opportunity to purchase credits, process orders and make use of our functionalities and services; checking the data subject’s account, token/pass or other information that is being added; processing payment transactions, delivering tokens/passes, securing the platform and accounts, identification purposes and service provision; upholding the user terms of (my)NetPay; compliance with laws and regulations; assisting third parties in providing products/services that the data subject requests from third parties; resolving disputes and disputed payment transactions; recognising, preventing, limiting and combating abuse and fraud; maintaining contact with the data subject, providing the data subject with information and handling questions, requests or complaints; obtaining insight into the use of our products and services by performing data analyses for the purpose of improving them. Retention periods of the personal data The personal data is retained for as long as necessary for the purposes specified above or as long as stipulated by the law. The General Data Protection Regulation does not mention any specific retention periods for personal data. Other laws may have minimum retention periods, whic...
Description of the Processing Operations. This Exhibit specifies the subject-matter of the processing, the nature and purpose of the processing, the type of personal data and categories of data subjects. The parties may provide further details in the Agreement if required for a particular Service. Subject matter, nature and purpose of the processing Siemens and its Subprocessors will Process Personal Data to provide the Services, including: • internet accessible or similar services made available and hosted by Siemens (“Cloud Services”); or • administration, management, installation, configuration, migration, maintenance and support services or any other services requiring (remote) access to Personal Data stored in the Cloud Services or on Customer’s IT systems (“Support and Professional Services”). Data Subjects The Personal Data Processed concerns the following categories of Data Subjects: Data Subjects include: • employees, • contractors, • suppliers, • business partners; and • other individuals whose Personal Data is stored on the Services and/or is Processed in the context of providing the Services. Categories of data The Personal Data Processed concerns the following categories of personal data: • contact and user information, including name, phone number, email address, time zone, and address data; • system access, usage, authorization data, operating data and any system log-files containing Personal Data or any other application-specific data which users enter into the Services; and • where applicable further Personal Data as determined by Customer and its Further Controllers by uploading or connecting it to the Services or otherwise granting access to it via the Services.
