Personal data

That they personal data, it is necessary to communicate with the Net surfers

While browsing the web, I arrived to discover the website of the European Commission, there are develop several types of articles on the RGPD. Here is one of them, he tells us about the type of information that must be given to the people whose data are collected. Here is the link of the article.

That they personal data, it is necessary to communicate with the Net surfers

  • At the moment when their data is collected, it is necessary at least to clearly communicate to people:

  • who is your company / organization (your contact details and those of your DPO if applicable);

  • why your company / organization will use their personal data (purposes);

  • the categories of personal data concerned;

  • the legal reason for processing their data;

  • the length of time that the data will be retained;

  • other possible recipients of the data;

  • the possible transfer of their personal data to a recipient established outside the EU;

  • their right to copy the data (right of access to personal data) and other fundamental rights in the field of data protection (see the full list of rights);

  • their right to lodge a complaint with a Data Protection Authority (PDA);

  • their right to withdraw their consent at any time;

  • where appropriate, the existence of automated decision-making and the underlying logic, including the consequences of this treatment.

See the full list of information to provide.

This information may be provided in writing, orally at the request of the data subject when its identity is demonstrated by other means, or electronically where appropriate. Your business / organization must do it in a concise, transparent, understandable and easily accessible way, in clear and simple terms and free of charge.

When the data is obtained from another company / organization, your company / organization should provide the above information to the data subject no later than one month from the time your company obtained the data. personal data; or, if your company / organization communicates with the person, when the data is used to communicate with them; or, if it is intended to communicate the information to another company, when the personal data are first disclosed.

Your company / organization must also inform the data subject of the categories of data and the source that provided the data; and, if data were obtained from publicly available sources, this information should also be mentioned. In specific cases in Article 13 (4) and Article 14 (5) of the RGPD, your company / organization may be exempted from the obligation to inform the data subjects. Please check if your company / organization is in one of these cases.

References

  • Article 12 (1), (5) and (7), Articles 13 and 14 and Recitals 58 to 62 of the GDPR

  • Article 29 Working Party, Transparency Guidelines

Various articles on the GDPR that could interest you ...