and (d) Personal Data that includes any medical history, mental or physical condition, or medical treatment or diagnosis by a health care professional, health insurance information, biometric information. passwords to any online accounts, credentials to any financial accounts, tax return data, payment card information personal data of any individual who is under 16 years of age.</p> <p> <strong>(m) Standard Contractual Clauses</strong> means the mandatory provisions of the standard contractual clauses for the transfer of personal data to processors established in third countries in the form set out by European Commission Decision 2010/87/EU.</p> <p> <strong>(n) Subprocessors</strong> means third parties that Qualified engages to Process Personal Data in relation to the Services.&nbsp;</p> <p> <strong>(o) Third Party Subprocessors</strong> has the meaning given in Section 5 (Subprocessors) of Annex 1.</p> <p> <strong>(p)</strong> The terms <strong>controller</strong>, <strong>data subject</strong>, <strong>processor</strong> and <strong>supervisory authority</strong> as used in this DPA have the meanings given in the GDPR.&nbsp;</p>