(1) the purposes for which the personal data is processed;</p> <p>(2) the categories of personal data which are being processed;</p> <p>(3) the recipients (or categories of recipients) to whom the personal data has been disclosed, or is still being disclosed;</p> <p>