Common use of Records of Processing Activities Clause in Contracts

Records of Processing Activities. 4.4.1 The Processor shall maintain a record of the processing of personal data, provided that the following conditions are met: a) The Processor has more than 250 employees; b) The processing of personal data by the Processor is likely to result in a risk to the rights and freedoms of data subjects; c) The processing is not occasional d) The processing includes special categories of personal data; or e) The processing relates to criminal convictions and offences. 4.4.2 The record must include the following information: a) Categories of processing carried out on behalf of the Controller. b) Processors' employees who process the personal data. c) If relevant, Sub-Processors (as defined in clause 6) and their employees who process the personal data. d) A general description of technical and organisational measures in connection with the processing. e) If relevant, specification of third countries or international organisations to which the personal data are transferred as well as documentation for appropriate safeguards. f) Contact details of the Processor's and Sub-Processor's contact person or data processing adviser (if appointed). 4.4.3 Upon request, the Processor shall make the records available to the Controller or any relevant supervisory authority within reasonable time.