Appendix 1 to Data processor Agreement

Instruction

The following document is the Instruction.

Definitions used in this Instruction shall have the same meaning as in the Agreement, unless the circumstances clearly indicate otherwise.

1 Contact information

1.1 Controller

The Client identified in the Agreement

1.2 Processor

Supplier: AlexisHR AB, reg. no. 559225-7132
Address: Magnus Ladulåsgatan 3, 118 65 Stockholm
Phone number: 010-750 05 48
E-mail address: BILLING@ALEXISHR.COM

1. Processing of Personal Data

1.1 Categories of Personal Data

The Supplier shall Process the following categories of Personal Data: The categories which is part of the Client Data submitted by the Client and User by using the Services, which may include

a) Contact information (such as name, address, e-mail, telephone number, working title, workplace)  

b) Social security number

c) Education and experience

d) Financial information (such as salary, tax and bank account information)

e) Information about absence from work (such as leave of absence, holiday, parental leave etc)

f) Sensitive personal data

1.2 Categories of Processing

The following categories of processing shall take place: collection, structuring, storage, adaptation or alteration, alignment or combination, restriction, erasure or destruction.

1.3 Categories of Data Subjects

The following categories of Data Subjects are included

a) Employees of the Controller

b) Consultants and other individuals working on behalf of the Data Controller

1.4 Purpose of each Processing activity

The purpose of the processing activities is for the Data Processor to provide the Services to the Controller as set out in, and for the duration of, the Agreement. 

2 Security measures

2.1 Technical and organisational security measures

The Supplier shall take the following technical and organisational security measures: 

a) Encryption

b) Control and log of access to the Personal Data

3 Subprocessor