African Union Legal Instrument Page|7 reference to an identification number or to one or more factors specific to his/her physical, physiological, mental, economic, cultural or social identity; Personal data file means all structured package of data accessible in accordance with set criteria, regardless of whether or not such data are centralized, decentralized or distributed functionally or geographically; Processing of Personal Data means any operation or set of operations which is performed upon personal data, whether or not by automatic means such as the collection, recording, organization, storage, adaptation, alteration, retrieval, backup, copy, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination and locking, encryption, erasure or destruction of personal data; Racism and xenophobia in information and telecommunication technologies means any written material, picture or any other representation of ideas or theories which advocates or encourages or incites hatred, discrimination or violence against any person or group of persons for reasons based on race, colour, ancestry, national or ethnic origin or religion; Recipient of processed personal data means any person entitled to receive communication of such data other than the data subject, the data controller, the subcontractor and persons who, for reasons of their functions, have the responsibility to process the data; Secret conventions means unpublished codes required to implement a cryptology facility or service for the purpose of enciphering or deciphering operations; Sensitive data means all personal data relating to religious, philosophical, political and trade-union opinions and activities, as well as to sex life or race, health, social measures, legal proceedings and penal or administrative sanctions; State Party or State Parties means Member State(s), which has (have) ratified or acceded to the present Convention; Sub-contractor means any natural or legal person, public or private, any other organization or association that processes data on behalf of the data controller; Third Party means a natural or legal person, public authority, agency or body, other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor are authorized to process the data.