Appendix A

Instructions for Handling Personal Data

Version 2024.11.25

This document offers a comprehensive and detailed overview of the purpose, types of data processed, retention policies, and effective methods for managing personal data within the services offered by GleSYS. Additionally, it addresses key tasks such as data storage, backups, and troubleshooting procedures.

Personal Data Management:

Purpose GleSYS processes personal data under this Data Processing Agreement on behalf of the Customer to provide the Services agreed upon by GleSYS and the Customer and to fulfill its obligations under the Agreement.
Categories of Data Subjects GleSYS processes personal data concerning data subjects whose personal data the Customer stores or otherwise processes in the Services provided by GleSYS.
Categories of Personal Data GleSYS processes the personal data that the Customer stores or otherwise processes in the Services provided by GleSYS. GleSYS may also process special categories of personal data (as defined in GDPR).
Retention Period The Customer controls how long personal data is processed in the Services provided by GleSYS and when such data is deleted. GleSYS processes personal data only in accordance with the Customer’s instructions from time to time and the Agreement in general, for example, through backups.
Practical Handling GleSYS processes personal data only in ways specified in the Agreement, such as but not limited to storage, transfer, backup, and hosting.

For the “Remote Hands” service, GleSYS also processes personal data through troubleshooting and configuration.