Type and Purpose of Processing Clause Samples

Type and Purpose of Processing. Providing of Software as a Service to enable measurements using Processors products and hosting of raw data, measures, results as well as providing reports and analysis and hosting of test and raw data as well as patient related data. • Type and categories of personal data o General data, such as Patient Name, Date of Birth or Age, Gender or Country and place of residence; o Specific Immunoglobulin E (“IgE”) measurement results (> 300 allergens); o Total IgE measurement results; o Clinical symptoms (seasonal, perennial, episodic, multiple selections possi- ble), such as Asthma, Rhinitis, Conjunctivitis, Urticaria, Angioedema, Oral Al- lergy Syndrome, Eczema, Anaphylaxis or Gastroenteric Symptoms. o Name o E-mail Address o General data, such as name of Controller / entity, contact details (address telephone number, e-mail address, website; o Legal representative(s); o VAT number, companies register number; o Contracts, Agreements, other correspondence.

Type and Purpose of Processing. In principle, the type of processing includes all types of processing permitted by the GDPR. Details are set out in Appendix A. The purpose of the agreement is stated in § 1 of this contract.

Type and Purpose of Processing. 2.1 The Contractor will process Client Data on its behalf and only in accordance with the Client's instructions. Art. 5

Type and Purpose of Processing. The type and purpose of the processing of personal data by the Processor on behalf of the Con- troller are stated in the Service Agreement.

Type and Purpose of Processing. 2.1.: The processor processes the personal data provided by the person responsible exclusively for the fulfillment of his contractual obligations from the main contract. The processing is therefore carried out on the basis of the main contract, this agreement or in accordance with an instruction from the person responsible. The processor is prohibited from processing personal data for its own or third-party purposes or from passing on personal data to third parties without prior written instructions from the person responsible. The duplication or copying of personal data by the processor is only permitted to the extent that this has been approved in advance by the person responsible or it is absolutely necessary to ensure proper data processing (copy for backup) or to comply with legal obligations (e.g. legal storage obligations). is. 2.2.: The specific types of processing (Art 4 Z 2 DSGVO) and purposes of the processing of the processor can be found in the main contract.

Type and Purpose of Processing. As part of fulfilling the service contract, the processor gains access to the following categories of personal data: ● Customer master data: first and last name, date of birth, address, nationality, etc. ● Customer’s customer data ● Customer’s data subjects ● Employee master data ● Address data: street, house number, postal code, city, country, etc. ● Meta and communication data (e.g., telephone, email) ● Delivery data: goods and quantities, delivery locations and times, recipients, etc. ● Billing data: customer invoices, supplier invoices, etc. ● Customer content data Personal data relates to the following groups of individuals: ● Customer data ● Supplier data ● Customer employees ● External employees of the customer ● Customer’s end users ● Customer’s data subjects ● Customer’s service providers The nature of processing includes all types of processing within the meaning of the Swiss Federal Act on Data Protection (DSG). The "purposes" refer to the measures required for providing the agreed services. Processing includes storing, retrieving, writing, and evaluating activity logs. Processing takes place exclusively in a protected user environment with appropriate access permissions. The processor is authorised to process personal data on its systems as required to fulfil its tasks. The processing of personal data serves the following purpose: ● Automation of the creditor and debtor processes of the controller The scope and purpose of processing are also defined in the service contract. The parties expressly agree that the obligations regulated in this agreement regarding the handling of personal data apply at all times whenever and as long as the processor processes personal data of the controller. Processing takes place exclusively in Switzerland. The processor is prohibited from processing personal data outside Switzerland Upon completion of the agreed services, the processor undertakes to either delete or return all personal data at the controller's discretion, unless data retention is required under data protection or other applicable law. Deletion will take place within 30 days after the service provision ends.

Type and Purpose of Processing