Record of Processing Activities Sample Clauses
The Record of Processing Activities clause requires organizations to maintain detailed documentation of how they collect, use, store, and share personal data. This typically involves keeping up-to-date records that list the categories of data processed, the purposes for processing, data recipients, and retention periods. By mandating this documentation, the clause ensures transparency and accountability in data handling practices, helping organizations comply with data protection regulations and enabling easier oversight by authorities.
Record of Processing Activities. The Processor keeps a record of Processing activities pursuant to Art. 30 GDPR.
Record of Processing Activities. The Controller shall maintain a record of processing activities under its responsibility. This record contains the name and contact details of the Controller, the purpose of the processing, a description of the categories of Data Subjects and the categories of personal data.
Record of Processing Activities. 5.1 According to article 30, paragraph 2, of the GDPR, the Processor undertakes to keep a separate register, constantly updated for all categories of activities relating to the processing of Relevant Personal Data carried out on behalf of the Controller. This Record must contain:
a) the name and contact details of the Processor and of its Sub-Processors involved in the processing of Relevant Personal Data, the Controller and, where applicable, the data protection officer of the Controller and of the Processor;
b) the categories of processing activities carried out on behalf of the Controller;
c) where applicable, Relevant Personal Data transferred to a third country or an international organization, including the identification of the third country or international organization and, for the transfers referred to in the second paragraph of article 49 of the GDPR, documentation of adequate guarantees;
d) a general description of the technical and organizational security measures defined in article 32, paragraph 1 of the GDPR.
5.2 The Processor undertakes to promptly provide the Controller with a copy of the register, upon request of the Controller and/or competent authorities.
5.3 The Processor undertakes to provide the Controller with all relevant information concerning the processing of Relevant Personal Data necessary for the Controller to prepare its own registry of the processing activities, as defined by article 30, paragraph 1, of the GDPR.
Record of Processing Activities. The Processor warrants that it maintains a written record of all categories of processing activities carried out on behalf of the Controller, containing: • The name and contact details of the Controller on behalf of which the Processor is acting, of any processors and, where applicable, the data protection officer. • The categories of processing carried out on behalf of the Controller.
(1) of the GDPR, the documentation of suitable safeguards. • Where possible, a general description of the technical and organisational security measures, including inter alia as appropriate: o The pseudonymisation of personal Data. o The ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services. o The ability to restore the availability and access to personal Data in a timely manner in the event of a physical or technical incident.
o A process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.
Record of Processing Activities. Each Party shall maintain a record of its Processing activities under the Agreement that includes the following information:
a. The name and contact details of the Controller and, where applicable, the joint controller, the Controller’s representative and the data protection officer;
b. The purposes of the Processing;
c. A description of the categories of Research Participants and of the categories of Personal Data;
d. The categories of recipients to whom the Personal Data have been or will be disclosed including recipients in third countries or international organizations;
e. Where applicable, transfers of Personal Data to a third country or an international organization, including the identification of that third country or international organization and, when applicable, the documentation of suitable safeguards;
f. Where possible, the envisaged time limits for erasure of the different categories of Personal Data; and
g. Where possible, a general description of the technical and organizational security measures implemented to protect the Personal Data.
Record of Processing Activities. The Parties undertake to establish and maintain a register of processing activities that includes at least the elements listed in Article 30.2 of the GDPR.
Record of Processing Activities. THE PROCESSOR undertakes to keep a record of all processing activities carried out on behalf of Tax Consult in accordance with Applicable Data Protection Law. Audit: THE PROCESSOR shall permit Tax Consult (or its appointed third-party auditors) to audit THE PROCESSOR's compliance with this Agreement, and shall make available to Tax Consult all information, systems and staff necessary for Tax Consult (or its third-party auditors) to conduct such audit. THE PROCESSOR acknowledges that Tax Consult (or its third party auditors) may enter its premises for the purposes of conducting this audit, provided that Tax Consult gives it reasonable prior notice of its intention to audit, conducts its audit during normal business hours, and takes all reasonable measures to prevent unnecessary disruption to THE PROCESSOR's operations. Tax Consult will not exercise its audit rights more than once in any twelve (12) calendar month period, except (i) if and when required by instruction of a competent data protection authority; or (ii) Tax Consult believes a further audit is necessary due to a Security Incident suffered by THE PROCESSOR. THE PROCESSOR shall also respond to any written audit questions submitted to it by Tax Consult, provided that Tax Consult shall not exercise this right more than once per year.
Record of Processing Activities. The Processor shall maintain a comprehensive record of all processing activities conducted on behalf of the Company, as mandated by Article 30 of the GDPR. This record will encompass all necessary details as specified in Article 30(1) and (2) of the GDPR, such as the purposes of processing, categories of data subjects, types of personal data processed, and specifics regarding data transfers to non-EU countries. Upon the Company's request, the Processor commits to providing this record within 10 business days, ensuring it is consistently updated and accurately reflects all processing activities.
Record of Processing Activities. NTT DATA SPAIN shall keep a record of all the types of processing activities carried out on behalf of the Client or, where applicable, the Third Party, which shall contain: • The name and contact details of the processor or processors and each controller on whose behalf the processor is acting and, where applicable, the representative of the controller or the processor and the data protection officer. • The types of processing carried out on behalf of each controller. • Where applicable, the personal data transfers made to a third country or international organisation, including the identification details of the said third country or international organisation and, where applicable, documentation that accredits the adoption of the proper guarantees. • A general description of the technical and organisational security measures applied.
Record of Processing Activities. Where required by applicable Data Protection Requirements, Provider and, where applicable, Provider Parties will maintain a written record of their Processing activities (including in electronic form) for Personal Information and Sensitive Personal Information carried out in connection with the Services. Such record will include: