Page 24 2) The object of the processing and a general description of his/her functions; 3) The interconnections envisaged or all other forms of harmonization with other processing activities; 4) The personal data processed, their origin and the category of the persons concerned by the processing; 5) Duration of conservation of the processed data; 6) The service or services with responsibility to undertake the processing as well as the category of persons who, for reasons of their functions or the needs of the service, have direct access to registered data; 7) The persons entitled to receive data communication; 8) The function of the person or the service before which the right of access is to be exercised; 9) Measures taken to ensure the security of processing actions and of data; 10) Indication regarding use of a sub-contractor; 11) Envisaged transfer of personal data to a third country that is not a Member of the African Union, subject to reciprocity. Article II – 11: The protecting authority shall take the requisite decision within a set timeframe counting from the date of receipt of the request for opinion or authorization. Such timeframe may however be extended or not extended on the basis of an informed decision of the protection authority. Article II – 12: The opinion, declaration or request for authorization may be addressed to the protection authority by electronic means or by post. Article II – 13: AU Draft0 010111