Processing of personal data
Two types of processing must be distinguished: the data collected by this site, essentially contact requests, and the data processed as part of the service, which depend on the programme and on the role of each party.
- Roles under the regulations: controller and processor, for each processing operation.
- Categories of data processed by the service and corresponding purposes.
- Retention periods by category, and what becomes of data recorded in the ledger.
- List of processors, their role and the location of processing.
- Arrangements for exercising rights and contact details of the responsible person.
This block is visible in internal review only. No working text appears on published pages.
Two distinct processing operations
| Processing | Purpose | Roles |
|---|---|---|
| Site data | Contact and demonstration requests submitted through this site. | MAP is the controller for this processing. |
| Service data | Data needed to run a programme: attachment of holders, operations, reporting. | The allocation between controller and processor is established per programme and written into the contract. |
Data recorded in the ledger
Recording data in a distributed ledger raises specific questions: what is recorded, what remains off-chain, and the consequences for retention and the exercise of rights. The choice made for the arrangement is described with the technical documentation of the service.
What is not claimed
MAP does not declare general compliance with a standard on the basis of intentions. The arrangements implemented are described with their scope, and the points still being documented are identified as such in the assessment file.