Processing activities as a processor - Page 1

Processor
Here you select the organization that performs the processing as a service provider.
In other words: Who is providing the service?

Assigned to
Here you define which user in caralegal is responsible for documenting and maintaining this processing activity.

Data protection expert
Here you select the user who reviews the documentation and is responsible for approving the processing activity.

Data protection officer (optional)
Here you can specify the responsible data protection officer.
This field is optional.

Processing activities
If there is an existing processing activity from the perspective of the controller, it will appear here.
This may happen if you created the processor activity via “Add processor activity” based on an existing controller activity.

Note:
If there are no corresponding controller activities, this field remains empty.

Controller – Organizational unit
Here you specify which organizational unit of your company uses the service, meaning the internal client.

Controller – External recipients
Here you can list customers for whom you provide the processing service as a processor.

Note:
Most companies do not list individual customers here if the processing activity is performed for a large number of customers.
Instead, it is recommended to create a new external recipient with a title such as “Customers for processing activity XY” and, if necessary, link a customer list or your CRM system.