Art. 31 BayDSG
Record of Processing Activities
(1)In addition to the information required under Art. 30 para. 1 GDPR, the record shall include the legal basis for the processing and, where applicable, the use of profiling. Art. 30 para. 5 GDPR shall not apply.