1 The Processor shall provide the services agreed in accordance with this Annex to the Client exclusively in accordance with the Client's instructions and on the basis of the agreement concluded between the Parties on the processing of personal data on behalf of the Client.
2 The Processor shall process the following personal data on behalf of the Client for the aforementioned purposes:
Type of data | Purpose of the data processing | Data subjects |
|---|---|---|
User-created content | The application allows service users (customers) to store personal data, for example in free text fields. Instructions about the admissibility of such information and monitoring of compliance are the sole responsibility of the Client. | Any person |
Operation and support: name, email address, telephone number of customer contacts | Handling business correspondence between Processor and Client. | Customer contacts |
Customer user accounts (name, email address, avatar) and group affiliation/assigned role | Management of user accounts for access to service. | Service users |
Linking of user accounts with user data (e.g. assigned tasks). | Enabling efficient cooperation between users (use of core functionality of applications and of add-ons used). Specific configuration of such links is the responsibility of the customer. | Service users |
Log files | Recording of actions on the system, possibly with user reference, for the purpose of analysis of faults or other specific incidents. | Service users |
Email notifications | Creation, storage and sending of emails sent via the application. | Service users |
Audit logs (amendments by users/customers) | Recording of amendments made to the system with user reference for purpose of reproducibility and auditability. | Service users |