As per Art. 30 of the GDPR every company must create a register of processing activities (ROPA) to the particular data processes. Company structures should also be noted during the creation and management of the registers, like the catalogues from the perspective of the contracting service company.