EISMEA public register of processing activities

Based on Article 31(5) of Regulation (EU) 2018/1725 EISMEA has to keep a central register of records of processing activities under its responsibility involving personal data.

The records of the register shall contain at least the following information (Article 31(1) of Regulation (EU) 2018/1725):

• Name and contact details of the controller, the data protection officer and, where applicable, the processor and the joint controller;
• Categories of data subjects and of personal data;

• Categories of recipients to whom the personal data have been or will be disclosed;
• Where possible, the envisaged time limits for erasure of the different categories of data;

• Where applicable, transfers of personal data to a third country or an international organisation and the documentation of suitable safeguards;
• Where possible, a general description of the technical and organisational security measures to protect those personal data.

The register of records of processing activities, provides hyperlinks to the relevant records as soon as they are finalised. Currently revisions of all records are prepared to reflect the new postal address of the Agency: “EISMEA SB 34 – 1049 – Brussels” since 15 September 2023 and a reorganisation of its services effective since 16 December 2023 (see organisation chart). In the meantime further information can be requested by any person in writing to the Data controller or EISMEA-DPOec [dot] europa [dot] eu (the EISMEA DPO), who shall reply within 1 month from the registration of the request.