Common use of Records of Processing Activities Clause in Contracts

Records of Processing Activities. 6.1 The Data Processor shall keep records of all categories of processing activities performed on behalf of the Data Controller. Records of Processing activities shall include at least the following: (a) the name and contact details of the Data Processor and the Data Controller on whose behalf Processing is performed; (b) the name of the Data Protection Officer (DPO), if appointed either on a voluntary basis or on a mandatory basis in accordance with the relevant provisions of Regulation; (c) the categories of Processing carried out on behalf of the Data Controller; (d) where applicable, transmissions of Personal Data to a third country, including the identification of that third country, and, in the case of transmissions without a decision on adequacy or appropriate safeguards, including company binding regulations, evidence of the fulfillment of the conditions referred to in the second subparagraph of Article 49(1); (e) a general description of the technical and organizational security measures described in Article 32 (1) of the Regulation. 6.2 The records of Processing activity are kept by the Data Processor in writing and, in any case, in electronic form. The Data Processor has the obligation to keep the relevant records up to date and to add or remove Processing activities and related information, as appropriate. 6.3 The Data Processor shall make the Processing activity file available to the Supervisory Authority upon request. 6.4 The Data Processor shall place the records of Processing activity at the disposal of the concerned Data Controller at the latter's request. The Data Controller reserves the right to request specific explanations from the Data Processor in relation to the content of the records of Processing activity, as well as to propose reasonable modifications and additions to achieve ▇▇▇▇▇▇ and more effective compliance with all obligations under the Regulation.