TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c) (or document/legislation attached):
TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): Data exporter is the legal entity that has executed the Data Processing Addendum based on the Standard Contractual Clauses as a Data Exporter established within the European Economic area and Switzerland that have purchased the Service on the basis of one or more Order Form(s). Data importer The data importer is (please specify briefly activities relevant to the transfer): Data importer, Okta, Inc., is an identity and access management cloud service provider which Processes Personal Data, where such data is Customer Data, upon the instruction of the data exporter in accordance with the terms of the Agreement and the Data Processing Addendum. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Data exporter may submit Personal Data to the Service, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to Personal Data relating to the following categories of data subjects: • Customers, business partners, and vendors of the data exporter (who are natural persons) • Employees or contact persons of data exporter customers, business partners, and vendors • Employees, agents, advisors, contractors, or any user authorized by the data exporter to use the Service (who are natural persons) Categories of data The Personal Data transferred concern the following categories of data (please specify): Data exporter may submit Personal Data to the Service, the extent of which is determined and controlled by the data exporter in its sole discretion, and which may include, but is not limited to the following categories of personal data: • First and last name • Business contact information (company, email, phone, physical business address) • Personal contact information (email, cell phone) • Title • Position • Employer • ID data • Professional life data • Personal life data (in the form of security questions and answers) • Connection data • Localization data Special categories of data (if appropriate) The Personal Data transferred concern the following special categories of data (please specify): Dat...
TO THE STANDARD CONTRACTUAL CLAUSES. Description of the technical and organizational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c):
TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): Transferring personal data for the provision of services as detailed in the Agreement…………………………………………………………………………………………………… Data importer The data importer is (please specify briefly activities relevant to the transfer): Processing personal data to enable and facilitate the provision of the services detailed in the Agreement…………………………………………………………………………………………………… Data subjects The personal data transferred concern the following categories of data subjects (please specify): Cardholders or shoppers of the Controller; Management personel of the Controller Categories of data The personal data transferred concern the following categories of data (please specify): Encrypted credit card number, name, email, address, IP adress and any other information transferred by the controller; ………………………………………………………………………………… Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): ……………N/A…………………………………………………………………………………………… Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): processing, storing, analyzing, visualizing, and monitoring data DATA EXPORTER Name:……………………………… Authorised Signature …………………… DATA IMPORTER Name:……………………………… Authorised Signature ……………………
TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix.
TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): Data importer The data importer is (please specify briefly activities relevant to the transfer): Data subjects The personal data transferred concern the following categories of data subjects (please specify):
TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): Data importer The data importer is (please specify briefly activities relevant to the transfer): Data subjects The personal data transferred concern the following categories of data subjects (please specify): Categories of data The personal data transferred concern the following categories of data (please specify): Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): DATA EXPORTER Name:……………………………… Authorised Signature …………………………………….. DATA IMPORTER Name:……………………………… Authorised Signature ……………………………………..
TO THE STANDARD CONTRACTUAL CLAUSES. (Description of the technical and organisational security measures implemented by the data importer in accordance with Clauses 4(d) and 5(c)) This Appendix forms part of the Clauses and must be completed and signed by the parties. Medius maintains security measures appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing. These measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected, taking into account the state of the art and the cost of implementation. The technical and organisational security measures that Medius has in place for any system that processes Personal Data with regard to prevent improper destruction, alteration, disclosure, access, and other improper forms of processing of information exported by the data exporter to the data importer, include the following areas: - Access control - Information Classification (and handling) - Physical and Environmental Security - Acceptable Use of Assets - Clear Desk and Clear Screen - Information Transfer - Mobile Device and Teleworking - Restrictions on Software Installation and Use - Backup Routines - Malware-protection - Management of Technical Vulnerabilities - Cryptographic Controls - Communications Security - Privacy and Protection of Personally Identifiable Information - Subcontractor Relationship SCHEDULE A LIST OF SUB-PROCESSORS The parties below or their subsidiaries may provide services to one or more Services offered under the Agreement. Subprocessor Location Comment
TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix Data exporter The data exporter is: [This section is deemed to be populated with your details] Data importer The data importer is: [This section is deemed to be populated with our details or the relevant Telstra Group Company] Data subjects The personal data transferred concern the following categories of data subjects: [This section is deemed to be populated with the content of the section headed "The categories of Data Subject to whom your Personal Data relates" in ANNEX 1 to this Addendum] Categories of data The personal data transferred concern the following categories of data: [This section is deemed to be populated with the content of the section headed "The types of your Personal Data to be Processed" in ANNEX 1 to this Addendum] Special categories of data (if appropriate) The personal data transferred concern the following special categories of data: [This section is deemed to be populated with the content of the section headed "The types special categories of your Personal Data to be Processed " in ANNEX 1 to this Addendum] Processing operations The personal data transferred will be subject to the following basic processing activities: The processing operations are set out in the Agreement. DATA EXPORTER [Populated with details of, and deemed to be signed on behalf of, the data exporter:] Name:……………………………… Authorised Signature …………………… DATA IMPORTER [Populated with details of, and deemed to be signed on behalf of, the data importer:] Name:……………………………… Authorised Signature ……………………
TO THE STANDARD CONTRACTUAL CLAUSES. This Appendix forms part of the Clauses and must be completed and signed by the parties. The Member States may complete or specify, according to their national procedures, any additional necessary information to be contained in this Appendix. Data exporter The data exporter is (please specify briefly your activities relevant to the transfer): A hotel chain, who processes the categories of data below for the purpose of processsing the guests’ reservations the data exporter receives through the data importer’s booking system; and for web services, GMS, Media and Business intelligence services. Data importer The data importer is (please specify briefly activities relevant to the transfer): A software as a service (SaaS) company providing web hosting services, reservation/booking services, GMS, Media and business intelligence services to hotels. Data subjects The personal data transferred concern the following categories of data subjects (please specify): Hotel guests; Employees of data exporter using the services Categories of data The personal data transferred concern the following categories of data with respect to hotel guests (please specify): Guest information: salutation, last name, first mail, title, email, company, address 1, xxxxxxx0, xxxx, xxxxx, postal code, country, phone, frequent guest id, initial_, phoneday, phoneevening, rawstreetaddr, lastupdate, users, unsubscribe, gsource, groupconame, birthdate, corpid, frequent_guestid, lastccno, contacttitle, contactfirstname, contactlastname, contactemail, airtravelerid, cartravelerid, guest profile, IP. Payment information: credit card type, credit card number, expiration date, name on card, billing address 1, billing address 2, billing city, billing country, billing state, billing postal code, billing code The personal data transferred concern the following categories of data with respect to Data exporter employees (please specify): First and last name; email address; position Special categories of data (if appropriate) The personal data transferred concern the following special categories of data (please specify): None. Processing operations The personal data transferred will be subject to the following basic processing activities (please specify): As indicated on any agreement for Services from TravelClick, Inc. involing the processing of Personal Data on behalf of the Data exporter.
