In addition to the necessary amount of data as set out in Section 11(1) of the Law on the Register of Natural Persons, the legal basis for the need to receive the data, the purpose of the use of the data and the initiation to conclude a contract for the use of the PDB, the request shall specify:

• the scope of the legal person’s activities, what services it provides;
• how a legal entity’s client base is formed;
• information on how a person who wishes to apply for or use the services of a legal person is identified;
• information on if the services provided are offered on-site, remotely, or if the services provided by the legal person are offered by cooperation partners (specify which cooperation partners);
• information on when (e.g. when receiving an application for receipt of services or during the validity period of the contract) data from the Register of Natural Persons will be requested;
• the planned number of requests for data from the Register of Natural Persons (to be indicated in figures per month, e.g. 2,000);
• whether the legal entity has a designated data protection officer (name, surname, contact details, statement number provided by the Data State Inspectorate, if applicable);
• whether the legal entity has other permissions, if required by laws and regulations (e.g. a licence from the Consumer Rights Protection Centre to provide credit services);
• a contact person to liaise with the OCMA during the contracting process;
• and other information that justifies the legal person’s right to process the personal data of natural persons (for example, a sample application form for services or a sample contract that the legal person enters into with customers).