APPENDIX 1: DETAILS OF PROCESSING

Subject matter: 

The subject matter of the processing of the personal data are set out in the Master Agreement where the Data Provider transfers Personal Data to the Data Recipient for the provision of messaging and communication services.

Nature and purpose of the processing: 

Under the Master Agreement, Data Recipient provides certain services such as messaging and other communication services, as further detailed in the Master Agreement, to the Data Provider, which involves the processing of personal data. Such processing activities include (a) providing the Services; (b) the detection, prevention, and resolution of security and technical issues; and (c) responding to Data Provider’s support requests.

Categories of personal data: 

The personal data submitted to the Data Recipient’s network, the extent of which is determined and controlled by the Data Provider, may include phone number, e-mail address, communications metadata and content (such as message text, message bodies, voice and video media, images, sound), traffic data.

Categories of data subjects: 

Data Controller’s End users; Senders and recipients of email and SMS messages, voice calls, or other communication or content.

Duration of the processing:

The duration of the processing is limited to the duration needed to perform its obligations under the Agreement, unless a legal obligation applies. The obligations of Data Recipient with regard to the Data processing shall in any case continue until the Data have been properly deleted or have been returned at the request of the Data Provider.