1. Categories of data subjects whose personal data is transferred

The categories of data subjects whose personal data are transferred include individuals about whom data is provided to Huawei Cloud via the Services by (or at the direction of) the Customer, in particular the Customer’s (i) employees, (ii) suppliers, (iii) End Users, (iv) clients.

2. Categories of personal data transferred

The categories of personal data transferred are data relating to individuals about whom data is provided to Huawei Cloud via the Services by (or at the direction of) the Customer.

Sensitive data transferred (if applicable) and applied restrictions or safeguards that fully take into consideration the nature of the data and the risks involved, such as for instance strict purpose limitation, access restrictions (including access only for staff having followed specialized training), keeping a record of data access, restrictions for onward transfers or additional security measures.

The categories of personal data transferred may include special categories of personal data (as defined in the Applicable Data Protection Law).

3. Purpose(s) of the data transfer and further processing

The purpose of the processing is to compute, store and deliver content on the Huawei Cloud so as to provide the Services under the Agreement.

4. The period for which personal data will be retained, or, if that is not possible, the criteria used to determine that period

The data exporter will retain personal data for the term of the Agreement plus the period from the end of the term of the Agreement until the deletion of all Customer Data by Huawei Cloud in accordance with the Agreement and DPA.

5. Recipients

The personal data transferred may be disclosed only to the following recipients or categories of recipients (including sub-processors) available at: https://www.huaweicloud.com/intl/en-us/declaration-sg/dpa_spl.html.