APPENDIX 1: DETAILS OF PROCESSING
Subject matter:
The subject matter of the processing of the personal data are set out in the Master Agreement where the Data Provider transfers Personal Data to the Data Recipient for the provision of payment services.
Nature and purpose of the processing:
Under the Master Agreement, Data Recipient provides certain services such as payment and other communication services, as further detailed in the Master Agreement, to the Data Provider, which involves the processing of personal data. Such processing activities include (a) providing the Services; (b) the detection, prevention, and resolution of security and technical issues; and (c) responding to Data Provider’s support requests.
Categories of personal data:
The personal data submitted to the Data Recipient’s network, the extent of which is determined and controlled by the Data Provider, may include phone number, e-mail address, communications metadata and content (such as message text, message bodies, voice and video media, images, sound, transaction amount and status), traffic data, name, IP address, and other personal data included in the contact lists and message or call content.
Categories of data subjects:
Data subjects are the persons whose Data are processed by the Data Recipient; mostly include Data Controller’s end users.
Duration of the processing:
The duration of the processing is limited to the duration needed to perform its obligations under the Agreement, unless a legal obligation applies. The obligations of the Data Recipient with regard to the Data processing shall in any case continue until the Data have been properly deleted or have been returned at the request of the Data Provider.