Article 31d (register)

• 1

  The controller shall keep records containing the following information:

  • a.

    The name and contact details of the controller, joint controllers and data protection officer;

  • b.

    the purposes of the processing;

  • c.

    the categories of recipients to whom police data have been or will be provided, including recipients in third countries or international organizations;

  • d.

    A description of the categories of data subjects and categories of personal data;

  • e.

    where appropriate, the use of profiling;

  • f.

    where appropriate, the categories of transfers of police data to a third country or an international organization;

  • g.

    An indication of the legal basis of the processing, including transfers, for which the police data is intended;

  • h.

    if possible, the intended time periods within which the different categories of data will be deleted or destroyed;

  • i.

    if possible, a general description of the technical and organizational security measures referred to in Article 4a;

  • j.

    The granting of the authorizations referred to in Article 6.

• 2

  The processor shall maintain records containing the following information:

  • a.

    the name and contact details of the processor or processors and of each controller on whose behalf the processor acts and, where appropriate, of the data protection officer;

  • b.

    The categories of processing carried out on behalf of each controller;

  • c.

    if applicable, transfers of police data to a third country or international organization, specifying that third country or international organization, if expressly instructed to do so by the controller;

  • d.

    if possible, a general description of the technical and organizational measures referred to in Article 4a.