processing of personal data, the data controller, the sub-contractor as well as their collaborators. Sub-contractor: individuals or legal entities in charge of the processing of personal data on behalf of the data controller. The "Instance":refers to The National Authority for Protection of Personal Data.. Communication: the fact of giving, handing-over or disclosing personal data, whatever the methods and the means, to one or more people other than the data subject. Combination: correlating data contained in one or more data files held by other data controller Recipient: any individuals or legal entities who are given personal data. Chapter II Conditions of personal data processing Section I-Formalities prior to commencing data processing Article 7: The processing of personal data must be declared to the The National Authority for Protection of Personal Data at its head office. The Instance shall directly deliver a receipt or send a registered letter with acknowledgement on receipt or by any other means that leave a written trace. The notification is carried out by the data controller or his legal representative. The notification does not exempt the data controller or his legal representative from his responsibility toward third-parties. Conditions and proceedings of the notification shall be set by decree. The Instance shall issue its decision within one month from the date of receipt of the application. However, when the "Instance" has not given its opinion within this time limit, the application for notification shall be deemed to have been accepted. Article 8: In the case where an authorization of the "Instance" is required by the hereby Act, the application for authorization shall specify in particular: -The first name, the last name and residence of the data controller and in case of legal entity the company name, its head office and the identity of its legal representative; - The purposes of the processing of personal data and its norms; - The identities of data subjects and their residence; - The categories of the processing, its location and date; - The personal data and their origins; - The people or authorities who are allowed, regarding their functions, to take cognizance of the data; - The recipients to whom the data may be disclosed; - The place and period of storage of the processed information; -The steps taken to ensure confidentiality and security of processing; - The description of the combinations by the data controller with other data files; - The undertaking to process personal data according to the present Act. 2