{"api":"v1","generated_at":"2026-09-15T23:41:27.589Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/buero-halowerk-com-v1-processing-record-aef145","pinned_page":"https://tollindex.com/e/buero-halowerk-com-v1-processing-record-aef145/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"buero-halowerk-com-v1-processing-record-aef145","canonical_url":"https://buero.halowerk.com/v1/processing-record","resource":"https://buero.halowerk.com/v1/processing-record","http_method":"POST","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Takes an inventory — the controller, and one entry per processing activity with its purposes, the stated legal basis, the categories of data subjects and of personal data, the categories of recipients, any third-country transfers, the erasure periods and the security measures — and returns it laid out as a draft record of processing activities under Article 30(1) GDPR.","service_name":null,"declared_category":null,"declared_tags":[],"route_template":null,"registry_updated":"2026-08-20T06:44:22.698Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"processing record","category":"other","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.004 USDC","amount_units":0.004,"decimals_known":true,"pay_to":"0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":1,"unique_payers_30d":1,"last_called_at":"2026-08-20T06:44:22.351Z"},"validation":{"latest":{"observed_at":"2026-09-15T06:12:49.202Z","state":"pass","failed_checks":["bazaar.info.output"],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T06:12:49.202Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T05:43:29.980Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:36:51.104Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T07:53:54.102Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T11:47:22.759Z","state":"pass","failed_checks":["bazaar.info.output"],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E","page":"https://tollindex.com/seller/0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E","endpoints":1553,"hosts":67},"reports":0,"registry_record":{"cdp":[{"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","asset":"USDC","version":"2","eip712Domain":{"name":"USD Coin","chainId":8453,"version":"2","verifyingContract":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"},"network_name":"Base Mainnet","assetTransferMethod":"eip3009"},"payTo":"0x2880EdfFF13100677Bf97A3CBdF3Bc34771C4E5E","amount":"4000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-08-20T06:44:22.351Z","l30DaysTotalCalls":1,"l30DaysUniquePayers":1},"resource":"https://buero.halowerk.com/v1/processing-record","extensions":{"bazaar":{"info":{"input":{"body":{"dpo":{"name":"Anna Berger","email":"dsb@nordlicht.example"},"activities":[{"name":"Personalverwaltung","systems":["HR-Suite"],"purposes":["Durchfuehrung des Arbeitsverhaeltnisses","Lohnabrechnung"],"legal_basis":["art6_1_b_contract","art6_1_c_legal_obligation"],"data_categories":["Stammdaten","Vertragsdaten","Abrechnungsdaten"],"security_measures":["Rollenbasierte Zugriffsrechte","Verschluesselung im Ruhezustand","Protokollierung administrativer Zugriffe"],"retention_criteria":"Zehn Jahre nach Ende des Arbeitsverhaeltnisses wegen handels- und steuerrechtlicher Aufbewahrungspflichten.","recipient_categories":["Lohnbuero","Finanzamt","Sozialversicherungstraeger"],"retention_period_days":3650,"data_subject_categories":["Beschaeftigte","Bewerberinnen und Bewerber"]},{"name":"Newsletter","systems":["Mailversand"],"purposes":["Versand des Kundennewsletters"],"legal_basis":["art6_1_a_consent"],"data_categories":["Kontaktdaten","Einwilligungsnachweis"],"security_measures":["Double-Opt-in","Zugriff nur ueber Zwei-Faktor-Anmeldung"],"retention_criteria":"Bis zum Widerruf der Einwilligung, danach Loeschung binnen 30 Tagen.","recipient_categories":["Versanddienstleister"],"data_subject_categories":["Newsletter-Abonnenten"],"third_country_transfers":[{"safeguard":"scc_art46_2_c","country_code":"US","recipient_category":"Versanddienstleister","safeguard_reference":"Auftragsverarbeitungsvertrag 2026-014, Anlage 2"}]}],"controller":{"name":"Nordlicht GmbH","email":"datenschutz@nordlicht.example","address":"Hafenstrasse 4, 20359 Hamburg"}},"type":"http","method":"POST","bodyType":"json"}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","required":["controller","activities"],"properties":{"dpo":{"type":"object","required":["name"],"properties":{"name":{"type":"string","maxLength":300,"minLength":1,"description":"Legal name of the body."},"email":{"type":"string","maxLength":200,"description":"Contact mailbox of the body. A functional address, not a person."},"phone":{"type":"string","maxLength":60,"description":"Contact number of the body."},"address":{"type":"string","maxLength":500,"description":"Postal address as one line."}},"description":"The data protection officer, where one is appointed. Article 30(1)(a).","additionalProperties":false},"activities":{"type":"array","items":{"type":"object","required":["name","purposes"],"properties":{"name":{"type":"string","maxLength":200,"minLength":1,"description":"Short label of the activity, e.g. \"Payroll\" or \"Applicant management\"."},"systems":{"type":"array","items":{"type":"string","maxLength":200,"minLength":1},"maxItems":40,"description":"The systems the activity runs in. Not required by Article 30; carried through because a record without systems is hard to maintain."},"purposes":{"type":"array","items":{"type":"string","maxLength":500,"minLength":1},"maxItems":20,"minItems":1,"description":"Article 30(1)(b). One purpose per entry, in your own words."},"processors":{"type":"array","items":{"type":"string","maxLength":300,"minLength":1},"maxItems":40,"description":"Processors under Article 28. Not required by Article 30(1); carried through unchanged."},"legal_basis":{"type":"array","items":{"enum":["art6_1_a_consent","art6_1_b_contract","art6_1_c_legal_obligation","art6_1_d_vital_interests","art6_1_e_public_task","art6_1_f_legitimate_interests"],"type":"string"},"maxItems":6,"description":"Which of Article 6(1)(a) to (f) you rely on. Your statement — it is recorded, not chosen or checked here."},"data_categories":{"type":"array","items":{"type":"string","maxLength":200,"minLength":1},"maxItems":60,"description":"Article 30(1)(c), second half. Categories, e.g. \"contact data\", \"payroll data\" — never values."},"security_measures":{"type":"array","items":{"type":"string","maxLength":500,"minLength":1},"maxItems":40,"description":"Article 30(1)(g). General description of the technical and organisational measures under Article 32(1)."},"retention_criteria":{"type":"string","maxLength":2000,"description":"Article 30(1)(f). The criteria for erasure where no fixed period applies, e.g. \"six years after the end of the contract year\"."},"special_categories":{"type":"array","items":{"enum":["racial_or_ethnic_origin","political_opinions","religious_or_philosophical_beliefs","trade_union_membership","genetic_data","biometric_data","health_data","sex_life_or_orientation"],"type":"string"},"maxItems":12,"description":"Which special categories under Article 9(1) occur, if any."},"recipient_categories":{"type":"array","items":{"type":"string","maxLength":300,"minLength":1},"maxItems":40,"description":"Article 30(1)(d). Categories of recipients, e.g. \"payroll provider\", \"tax authority\"."},"retention_period_days":{"type":"integer","maximum":36525,"minimum":0,"description":"Article 30(1)(f). Erasure period in days, where a fixed one applies. Unit is in the name: days."},"special_category_basis":{"type":"array","items":{"enum":["art9_2_a_explicit_consent","art9_2_b_employment_law","art9_2_c_vital_interests","art9_2_f_legal_claims","art9_2_g_substantial_public_interest","art9_2_h_health_care","art9_2_i_public_health","art9_2_j_archiving_research"],"type":"string"},"maxItems":8,"description":"Which of Article 9(2) you rely on, where special categories of data are processed."},"data_subject_categories":{"type":"array","items":{"type":"string","maxLength":200,"minLength":1},"maxItems":30,"description":"Article 30(1)(c), first half. Categories, e.g. \"employees\", \"applicants\" — never individuals."},"third_country_transfers":{"type":"array","items":{"type":"object","required":["country_code"],"properties":{"safeguard":{"enum":["adequacy_decision_art45","scc_art46_2_c","bcr_art47","codes_of_conduct_art46_2_e","certification_art46_2_f","derogation_art49","none_stated"],"type":"string","description":"The safeguard you rely on under Article 46 or 49. Recorded as stated."},"country_code":{"type":"string","maxLength":2,"minLength":2,"description":"ISO 3166-1 alpha-2, uppercase, e.g. US."},"recipient_category":{"type":"string","maxLength":300,"description":"Category of recipient in that country."},"safeguard_reference":{"type":"string","maxLength":500,"description":"Where the safeguard is documented, e.g. a contract reference. Recorded, not retrieved."}},"additionalProperties":false},"maxItems":30,"description":"Article 30(1)(e). One entry per destination outside your own establishment. Destinations inside the EEA are recorded and marked as such."},"legitimate_interests_description":{"type":"string","maxLength":2000,"description":"The interests relied on, where art6_1_f_legitimate_interests is named. Recorded as stated; no balancing test is performed here."}},"additionalProperties":false},"maxItems":100,"minItems":1,"description":"One entry per processing activity. This is an inventory of activities, not a log of events."},"controller":{"type":"object","required":["name"],"properties":{"name":{"type":"string","maxLength":300,"minLength":1,"description":"Legal name of the body."},"email":{"type":"string","maxLength":200,"description":"Contact mailbox of the body. A functional address, not a person."},"phone":{"type":"string","maxLength":60,"description":"Contact number of the body."},"address":{"type":"string","maxLength":500,"description":"Postal address as one line."}},"description":"The controller — Article 30(1)(a). Required.","additionalProperties":false},"representative":{"type":"object","required":["name"],"properties":{"name":{"type":"string","maxLength":300,"minLength":1,"description":"Legal name of the body."},"email":{"type":"string","maxLength":200,"description":"Contact mailbox of the body. A functional address, not a person."},"phone":{"type":"string","maxLength":60,"description":"Contact number of the body."},"address":{"type":"string","maxLength":500,"description":"Postal address as one line."}},"description":"The representative under Article 27, where one is appointed. Article 30(1)(a).","additionalProperties":false},"record_language":{"enum":["de","en"],"type":"string","default":"de","description":"Language of the article texts printed beside each letter. Your own wording is never translated."},"joint_controllers":{"type":"array","items":{"type":"object","required":["name"],"properties":{"name":{"type":"string","maxLength":300,"minLength":1,"description":"Legal name of the body."},"email":{"type":"string","maxLength":200,"description":"Contact mailbox of the body. A functional address, not a person."},"phone":{"type":"string","maxLength":60,"description":"Contact number of the body."},"address":{"type":"string","maxLength":500,"description":"Postal address as one line."}},"description":"One joint controller.","additionalProperties":false},"maxItems":20,"description":"Joint controllers under Article 26, where there are any. Article 30(1)(a)."}},"additionalProperties":false},"type":{"type":"string","const":"http"},"method":{"enum":["POST","PUT","PATCH"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false}}}}},"description":"Takes an inventory — the controller, and one entry per processing activity with its purposes, the stated legal basis, the categories of data subjects and of personal data, the categories of recipients, any third-country transfers, the erasure periods and the security measures — and returns it laid out as a draft record of processing activities under Article 30(1) GDPR.","lastUpdated":"2026-08-20T06:44:22.698Z","x402Version":2}]}}