User ID, name, e-mail address, job role, information about the employer (the Data Controller), answers to questions in a personality assessment and the results of the personality assessment. • The Data Processor does not process special categories of personal data, cf. article 9 of the GDPR. The Data Controller should make sure and instruct the data subject to not provide special categories of personal data subject to article 9 of the GDPR. There may be an option to provide information about ethnical origin directly on the platform HALO, in which case such information is given directly to Hogan Assessment Systems, Inc, and such information is not part of the Data Processor’s processing activities.

The Data Processor's provision of its data processing services as ordered by or agreed with the Data Controller. These services may include: • Distribution and support of online personality assessment products provided by Hogan Assessment Systems Inc., including the online platform HALO and the Hogan Talent Platform (HTP), and – depending on Customer’s order - other third-party providers. • Other data processing services as agreed (for example handling of the Data Controller’s access and use of the platforms)

Depending on the nature of the Data Controller's organization, the processing of personal data will include the following data subjects (depending on the instruction given by Data Controller): • Job applicants, employees, consultants, executives, board members, other third parties etc. connected to the Data Controller, e.g. the person completing the personality test or end-users using the online personality assessment platform (typically the Data Controller’s HR staff).

Collection, review, processing, transfer, storage, deletion, etc. for use in the following purposes: • Provision of the data processing services agreed between the Parties, such as access and support to the online platform(s), including HALO; • Handling of data protection issues as well as other technical issues, such as transfer of and access to personal data, etc.; • Storage of personal data, including in connection with back-up (primarily in the platform(s)); and • Fulfilment of the Agreement and these Clauses.