ANNEX 1: SCOPE OF THE DATA PROCESSING

SCOPE OF THE DATA PROCESSING

This Annex forms part of the Data Processing Addendum between Subscriber and MindBridge.

The Processing of Personal Data concerns the following categories of Data Subjects:

1. Individuals whose personal data is uploaded to our Software by Subscribers in order for us to provide our Service.
2. The duration of the processing is: for as long as is considered necessary for the purposes which it was collected. We may keep data for longer in order to establish, exercise, or defend our legal rights and the legal rights of our subscribers.
3. Nature and purpose of the processing is: Provision of the Services and related processing activities described in the Master Agreement and individual purchase orders for the services.
4. The subject matter of the processing is: Processing financial data on behalf of the Subscriber. As part of this service we collect personal data which our Subscribers upload to our Service.
5. The type of Personal Data is: Any personal details that might be contained within the data that a Subscriber might upload. This includes (but is not limited to)
   1. Personal details (eg. Name)
   2. Contact details (eg. Email address, contact number, postal address)
   3. Financial details (eg. Salary, bank details, payroll details, and investments)
6. The obligations and rights of the Subscriber are as detailed in the Data Protection Laws and as set out in this Addendum.

1. Individuals whose personal data we process whilst they are using our Software.
2. The duration of the processing is: for as long as is considered necessary for the purposes which it was collected. We may keep data for longer in order to establish, exercise, or defend our legal rights and the legal rights of our subscribers.
3. Nature and purpose of the processing is: Provision of the Services and related processing activities described in the Master Agreement and individual purchase orders for the services.
4. The subject matter of the processing is: Processing financial data on behalf of the Subscriber. As part of this service we collect personal data related to our Subscribers.
5. The type of Personal Data is: Any personal details that might be contained within the data that a Subscriber might upload. This includes (but is not limited to)
   1. Personal details (eg. Name)
   2. Contact details (eg. Email address, contact number, postal address)
   3. Other information related to how our Subscribers use our Service, such as what they click on and do within the Software.
6. The obligations and rights of the Subscriber are as detailed in the Data Protection Laws and as set out in this Addendum