2. “Judicial record” is any data referring to decisions in criminal, civil, administrative filed or to documentations of criminal and civil registry, administrative sanction, etc. 3 “Anonymous data” is any data which in its origin or during its processing may not be associated to any identified or identifiable individual. 4.“Sensitive data” shall mean any piece of information related to the natural person in referring to his racial or ethnic origin, political opinions, trade union membership, religious or philosophical beliefs, criminal prosecution, as well as with data concerning his health and sexual life. 5. “Controller” shall mean the natural or legal person, public authority, agency or any other body, which alone or jointly with others determines the purposes and means of processing of personal data, in compliance with the laws and secondary legal acts applicable, and who is responsible for the fulfilment of obligations defined by this law. 6. “Personal data subject” shall mean any natural person, whose personal data are being processed. 7. “Processor” shall mean a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller. 8. “Filing system” shall mean any structured set of personal data, which are accessible according to specific criteria, whether centralized, decentralized or dispersed on a functional or geographical basis. 9 “Means of processing” shall mean automatic, semi automatic and mechanic means which process personal data 10 “Electronic instruments” shall mean the computer, computer programmes and any other electronic or automatic means used for the processing. 11. “Direct marketing” shall mean the communication of the promotional material, by every mean and way, using personal data of legal or natural persons, agencies or other entities with or without interference. 12. “Processing of personal data” shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, transmission, dissemination or otherwise making available, alignment or combination, photographing, reflection, entering, filling in, selection, blocking, erasure or destruction, even though they are not recorded in a data base. 13. “Recipient” shall mean a natural or legal person, public authority, agency or any other body to whom data are disclosed, whether a third party or not. The authorities which may receive data in the framework of a particular inquiry shall not be regarded as recipients. 14. “Person in charge”, shall mean the individual who is authorised by the head of the institution or the competent person to perform processing actions. 15. “Third party” shall mean any natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the data. 16. “Transmission” shall mean the transfer of personal data to recipients. 17 “Supervision” shall mean the careful follow-up of processing of personal data by all the controllers and processors through collaboration, control, administrative investigation and inspection in order to prevent violations and if appropriate, to impose administrative sanctions so as to ensure the enforcement of orders, instructions and recommendations of the Commissioner, in compliance with the fundamental human rights and freedoms. 6 7