ANNEX IB: DESCRIPTION OF TRANSFER

Categories of data subjects whose personal data is transferred

The data subjects are employees of the data exporter, and if applicable of its customers and vendors.

Categories of personal data transferred

• User authentication details
• Business contact information
• Logs of actions taken by users within the system

Please note that no transfer of sensitive data is anticipated.

Frequency of transfer

Data will be transferred on a continuous basis.

Nature of the processing

Data importer will record, organise, store, retrieve and disclose the personal data as instructed by the data exporter.

Purpose(s) of the data transfer and further processing

Data importer will record, organise, store, retrieve and disclose the personal data as instructed by the data exporter.

The period for which the personal data will be retained

Customer will determine retention of the personal data within production systems.  Supplier will further retain back-ups in line with Supplier’s data retention policy which is designed to ensure that Supplier meets contractual and regulatory retention requirements.

ANNEX IC: COMPETENT SUPERVISORY AUTHORITY

Identify the competent supervisory authority/ies in accordance with Clause 13

CNIL

Commission Nationale de l'Informatique et des Libertés

3 Place de Fontenoy

TSA 80715

75334 PARIS CEDEX 07

France