Personal data processing records

Krka identified all filing systems containing personal data of data subjects.

The description of an individual filing system for personal data (i.e. processing record) includes the following:

• Legal basis for processing personal data;
• Category of data subjects to whom personal data relate;
• Categories of personal data in the filing system;
• Purpose of processing;
• Duration of storage of personal data;
• Recipients or categories of personal data recipients contained in the filing system;
• Whether personal data are transferred to a third country or international organisation, where to, whom to, and the legal grounds for any such transfer;
• General description of personal data protection:
  – Filing systems in physical forms and rooms in which personal data from the filing system are located;
  – Transfers of personal data between filing systems (interfaces);
  – Filing system owners and persons with user rights for working positions that have access to data;
  – Contractual processors of personal data;
  – Transmission records;
  – Description of technical and organisational precautions.