Duration of processing activities. Oracle may Process Personal Information during the term of the Services Agreement and to perform its obligations under Section 9 of the Data Processing Agreement, unless otherwise required by applicable law.
Duration of processing activities. For the length of this Agreement to facilitate the Organisation’s use of the Services. Some Protected Data may be stored in encrypted backups for no longer than 1 month after termination of this Agreement. Nature and Purpose of the Processing Activities To enable the Organisation and Participants to get into contact with each other in relation to the Services. Types of Personal Data Business contact details. Categories of Data Subject Participants’ members of staff. Annex 2: Technical and Organisational Measures Ongoing confidentiality, integrity, availability and resilience of processing systems System architecture System architecture will be subject to regular penetration tests, Encryption 256-bit AES encryption is used on our database at rest, and on evidence uploads at rest. Update testing Updates will be internally tested. Regular web application penetration tests will be completed. Vulnerability testing Vulnerability scans will be run monthly. Access control Internal joiners, movers, and leavers processes will be enforced. Where possible, segregation of duties will be enforced. Principle of least privilege shall be applied. User authentication 2-factor authentication will be enforced. Password complexity will be enforced. Restoring availability and access to personal data in a timely manner in the event of a physical or technical incident Disaster recovery A full IT disaster recovery process, and business continuity process will be maintained. Regular testing, assessing and evaluating of these measures' effectiveness
Duration of processing activities. For the length of this Agreement to facilitate the Organisation’s use of the Services. Some Protected Data may be stored in encrypted backups for no longer than 1 month after termination of this Agreement. The frequency of the transfer (e.g. whether the data is transferred on a one-off or continuous basis): Continuous Nature and Purpose of the Processing Activities To enable the Organisation and Participants to get into contact with each other in relation to the Services. Types of Personal Data Business contact details. Categories of Data Subject Participants’ members of staff. Annex 1C: Competent Supervisory Authority Identify the competent supervisory authority/ies in accordance with Clause 13 For transfers made under the EU SCCs, the competent supervisory authority will be determined in accordance with Clause 13 of the EU SCCs. For transfers made under the UK SCCs, the competent supervisory authority will be the United Kingdom Information Commissioner's Office.
