Extent of Processing in scope. 3.1 The types of Personal Data that the parties foresee will be given by the Data Subjects, or someone acting on their behalf, and then collected, transferred and held by the parties in pursuance of the activities contemplated by this schedule will include:
(a) the names, gender, date and place of birth, health status and financial status of individuals who have registered, or been registered as having lost items of property;
(b) the addresses and contact details relating to the individuals of the type specified in (a) above;
(c) details of journeys and travel undertaken by individuals of the type specified in
(a) above;
(d) any national identification information including, but not limited to, passport, social security and driving licence details relating to the individuals of the type specified in (a) above;
(e) vehicle and bicycle registration numbers and tag / tracking numbers of property relating to the individuals of the type specified in (a) above;
(f) credit card, debit card and bank account details of the individuals of the type specified in (a) above;
(g) job title and employer details of the individuals of the type specified in (a) above;
(h) documentation (including photographs) relating to property of the individuals of the type specified in (a) above.
(i) IMEI and sim card numbers from mobile enabled devices;
(j) Serial numbers of electronic items.
3.2 Each party shall process the Personal Data identified in 3.1 to the extent necessary to:
(a) perform its obligations pursuant to the terms of the main Agreement;
(b) for the purposes of assisting relevant Data Subjects in recovering items of lost property;
(c) and/or in accordance with the other party’s reasonable, lawful instructions from time to time; and they shall not process the Personal Data for any purpose other than enabling it to fulfil its obligations pursuant to this Agreement or to perform any other activity which may be authorised by the other party from time to time.
3.3 The parties recognise that the Provider provides services to various third parties whereby it provides those third parties with solutions similar to the one described in the main body of this Agreement. The parties accept and agree that nothing in this Schedule is intended to prevent, or shall have the effect of preventing, the Provider from using Personal Data with which it is provided by the Customer for the purposes of enabling those third parties to unite relevant Data Subjects with items of lost property, exa...
