A legal person's application carries its commercial register, address, legal representative, organisational structure, activity and contact details; the licence or permit category; the nature and volume of personal data with sensitive data identified; the retention period; the security procedures for transfer; the mechanism for erasure and amendment at the data subject's request or by law; the storage method; the DPO; the consent mechanism; all technical data on the infrastructure including data centre classification, equipment, current technical certificates and accreditations and their compliance with the Centre's technical and operational requirements; and the technical certificates on the security of data retention and processing with their issuers, dates and validity. Applications go through the Centre's electronic portal, are studied by specialised working groups and answered within ninety working days of complete documentation, silence being refusal. A natural person applying for a permit provides an identity document, criminal record certificate, qualifications and the nature of their work; the permit type and category and its purpose; the nature and volume of data with sensitive data identified; the retention period; the erasure and amendment mechanism; the storage method; the mechanism for obtaining and recording consent; the technical data on equipment and current certificates; and the security certificates held. The Centre answers within ninety days of complete documentation, silence being refusal; a natural person's permit lasts no more than one year and the permit holder is responsible for applying the Law and performs the data protection officer's role.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.