[22nd December 2023] REPUBLIC OF SEYCHELLES Data Protection Act SUPPLEMENT TO OFFICIAL GAZETTE 661 ACT (b) where applicable, the name and contact details of the joint data controller; (c) where applicable, the name and contact details of the data protection officer; (d) the purposes of the processing; (e) the categories of recipients to whom personal data has been or will be disclosed, including recipients in third countries or international organizations; (f) a description of the categories of the data subject, and personal data; (g) where applicable, details of the use of profiling; (h) where applicable, the categories of transfers of personal data to a third country or an international organisation; (i) an indication of the legal basis for the processing operations, including transfers, for which the personal data is intended; (j) where possible, the envisaged time limits for erasure of the different categories of personal data; (k) where possible, a general description of the technical and organisational security measures referred to in section 35. (4) Each data processor shall maintain a record of all processing activities carried out on behalf of a data controller. (5) The data processor’s record shall contain the following information — (a) the name and contact details of the data processor and of any other another data processors engaged by the data processor in accordance with this section;