Common use of Data Processing Activities Clause in Contracts

Data Processing Activities. Categories of data Traveller and/or ▇▇▇▇▇▇ details – title, forename, middle name, surname, known name (if different), gender, date, place and country of birth, country of residence, nationality, marital status; location of Traveller – destinations and locations on trip. Company Information – company name, department, cost centre, account number, job title, employee number Main contact details – addresses (home, offices etc), telephone numbers, fax numbers, mobile telephone numbers, email address Travel ▇▇▇▇▇▇/PA Information – name, telephone number, email address Methods of payment – card type, card number, expiry date, usage preferences, debit/credit, personal/business Documents – Passport - passport country, issue country, passport number, forename, middle names, surname, date of issue, date of expiry, biometric (Y/N) Visa (inc. ESTA, Redress, Schengen, Work Permit, Global Entry) – visa county, issue country, type of visa, document number, issue date and date of expiry TSA – TSA number, start date, expiry date Driving Licences – country, licence number, forename, middle name, surname, start date, expiry date, provisional (Y/N), international (Y/N) ID Cards – country, ID card number, forename, middle name, surname, start date, expiry date Vaccine, Covid and health information as required for bookings Travel Preferences – Air - seat type, home airport, on-line check-in preference, meal type Car – category, style, transmission, fuel/aircon, satnav (Y/N), Rail – seat allocation, meal type Eurostar – coach number, seat number, seat type, seat allocation, meal type Hotel - smoking/non smoking, preferred room type Any accessibility requirements for trip Memberships – loyalty cards - service type, supplier, membership number, date of expiry, status, level Personal Hobbies/Interests Categories of Data Subjects Employees and guests of client, and others for whom the Client requires travel Processing Operations Provision of travel and travel-related services Purposes Provision of travel and travel-related services Duration Financials – duration of contract + 7 years Profiles – duration of contract, reviewed annually and deleted at request of client

Data Processing Activities. Categories of data Personal Information Traveller and/or ▇▇▇▇▇▇ details – title, forename, middle name, surname, known name (if different), gender, date, place and country of birth, country of residence, nationality, marital status; location of Traveller – destinations and locations on trip. Company Information – company name, department, cost centre, account number, job title, employee number Main contact details – addresses (home, offices etc), telephone numbers, fax numbers, mobile telephone numbers, email address Travel ▇▇▇▇▇▇/PA Information – name, telephone number, email address Methods of payment – card type, card number, expiry date, usage preferences, debit/credit, personal/business Documents – Passport - passport country, issue country, passport number, forename, middle names, surname, date of issue, date of expiry, biometric (Y/N) Visa (inc. ESTA, Redress, Schengen, Work Permit, Global Entry) – visa county, issue country, type of visa, document number, issue date and date of expiry TSA – TSA number, start date, expiry date Driving Licences – country, licence number, forename, middle name, surname, start date, expiry date, provisional (Y/N), international (Y/N) ID Cards – country, ID card number, forename, middle name, surname, start date, expiry date Vaccine, Vaccine and Covid and health information as required for bookings Travel Preferences – Air - seat type, home airport, on-line check-in preference, meal type Car – category, style, transmission, fuel/aircon, satnav (Y/N), Rail – seat allocation, meal type Eurostar – coach number, seat number, seat type, seat allocation, meal type Hotel - smoking/non smoking, preferred room type Any accessibility requirements for trip Memberships – loyalty cards - service type, supplier, membership number, date of expiry, status, level Personal Hobbies/Interests Categories of Data Subjects individuals whose Personal Information is used Employees and guests of client, and others for whom the Client requires travel Processing Operations Provision of travel and travel-related services Purposes Provision of travel and travel-related services Duration Financials – duration of contract + 7 years Profiles – duration of contract, reviewed annually and deleted at request of clientClient Annex 2 – Appendix 1 Description of Transfer As set out in Annex 1 under “Categories of individuals whose Personal Information is used ”.

Data Processing Activities. Categories of data Traveller Traveler and/or ▇▇▇▇▇▇ details – title, forename, middle name, surname, known name (if different), gender, date, place and country of birth, country of residence, nationality, marital status; location of Traveller Traveler – destinations and locations on trip. trip Company Information – company name, department, cost centre, account number, job title, employee number Main contact details – addresses (home, offices etc), telephone numbers, fax numbers, mobile telephone numbers, email address Travel ▇▇▇▇▇▇/PA Information – name, telephone number, email address Methods of payment – card type, card number, expiry date, usage preferences, debit/credit, personal/business Documents – Passport - passport country, issue country, passport number, forename, middle names, surname, date of issue, date of expiry, biometric (Y/N) Visa (inc. ESTA, Redress, Schengen, Work Permit, Global Entry) – visa county, issue country, type of visa, document number, issue date and date of expiry TSA – TSA number, start date, expiry date Driving Licences – country, licence number, forename, middle name, surname, start date, expiry date, provisional (Y/N), international (Y/N) ID Cards – country, ID card number, forename, middle name, surname, start date, expiry date Vaccine, Covid and health information as required for bookings Travel Preferences – Air - seat type, home airport, on-line check-in preference, meal type Car – category, style, transmission, fuel/aircon, satnav (Y/N), Rail – seat allocation, meal type Eurostar – coach number, seat number, seat type, seat allocation, meal type Hotel - smoking/non smoking, preferred room type Any accessibility requirements for trip Memberships – loyalty cards - service type, supplier, membership number, date of expiry, status, level Personal Hobbies/Interests Categories of Data Subjects Employees and guests of client, and others for whom the Client requires travel Processing Operations Provision of travel and travel-related services Purposes Provision of travel and travel-related services Duration Financials – duration of contract + 7 years Profiles – duration of contract, reviewed annually and deleted at request of clientInterests