from returning or destroying all or part of the personal data transferred. In that case, the data importer warrants that it will guarantee the confidentiality of the personal data transferred and will not actively process the personal data transferred anymore. 

2. The data importer and the sub-processor warrant that upon request of the data exporter and/or of the supervisory authority, it will submit its data-processing facilities for an audit of the measures referred to in paragraph 1. 

Appendix 1 to the Standard Contractual Clauses 

This Appendix forms part of the Clauses and must be completed by the parties 

## Data exporter 

The processing of personal data entails delivery of Banking and Financial Skills Trainings offered by the EIB Group as described in the Terms of Reference. 

## Data importer 

The data importer is a provider of training services based in [third country], who will assist and provide training services related to Banking and Financial Skills, as described in the Terms of Reference. 

## Data subjects 

The personal data transferred concern the following categories of data subjects (please specify): 

Natural persons who will participate in the trainings offered by the EIB. 

## Categories of data 

The personal data transferred concern the following categories of data (please specify): 

þ  Name 

þ  Business email 

þ  Job function/position 

þ  any other personal data regarding the workplace situations disclosed as part of the training. 

## Special categories of data (if appropriate) 

The personal data transferred concern the following special categories of data (please specify): 

No special categories of data are to be transferred. 

## Processing operations 

The personal data transferred will be subject to the following basic processing activities (please specify): 

þ Receiving data, including collection, accessing, retrieval, recording, and data entry 

þ  Holding data, including storage, organisation and structuring 

þ  Using data, including analysing, consultation, testing, automated decision making and profiling 

þ  Updating data, including correcting, adaptation, alteration, alignment and combination 

þ  Protecting data, including restricting, encrypting, and security testing 

