ANNEX 1: SCOPE OF THE DATA PROCESSING

SCOPE OF THE DATA PROCESSING

This Annex forms part of the Data Processing Addendum between Subscriber and MindBridge.

The Processing of Personal Data concerns the following categories of Data Subjects:

1. Individuals whose personal data is uploaded to our Software by Subscribers in order for us to provide our Service.
2. The duration of the processing is: for as long as is considered necessary for the purposes which it was collected. We may keep data for longer in order to establish, exercise, or defend our legal rights and the legal rights of our subscribers.
3. Nature and purpose of the processing is: Provision of the Services and related processing activities described in the Master Agreement and individual purchase orders for the services.
4. The subject matter of the processing is: Processing financial data on behalf of the Subscriber. As part of this service we collect personal data which our Subscribers upload to our Service.
5. The type of Personal Data is: Any personal details that might be contained within the data that a Subscriber might upload. This includes (but not limited to)
   1. Personal details (e.g. Name)
   2. Contact details (e.g. Email address, contact number, postal address)
   3. Financial details (e.g. Salary, bank details, payroll details, and investments)
6. The obligations and rights of the Subscriber are as detailed in the Data Protection Laws and as set out in this Addendum.