Appendix A - Information about the processing

The purpose of the Data Processor’s processing of personal data on behalf of the Data Controller is:

• That the Data Controller is able to use the web application which is owned and managed by the Data
  Processor to analyse images.

The Data Processor’s processing of personal data on behalf of the Data Controller shall mainly pertain to (the nature of the processing):

• That the Data Processor makes available RetinaLyze WebApp to the Data Controller and hereby stores
  personal data about the Data Controller’s clients.

The processing includes the following types of personal data about data subjects:

• Name

• Social security number

• Photo of the retina

• Result of analysis

Processing includes the following categories of data subject:

• Persons who have had images uploaded through the RetinaLyze WebApp from the Data Controller

The Data Processor’s processing of personal data on behalf of the Data Controller may be performed when this Data Processing Agreement commences. Processing has the following duration:

• Processing shall not be time-limited and shall be performed until this Data Processing Agreement is
  terminated or cancelled by one of the Parties.