Intro: What is meant by the privacy notice, what function does it have and what must be taken into account when implementing it?
To-Dos: What is the specific procedure for preparing the privacy notice and the associated obligations?
Statements: What have the data protection supervisory authorities published on the subject of privacy notice?
One of the basic assumptions of the GDPR is that data subjects need to be informed of the processing of their data in order to maintain at least a minimum of control. Transparency is viewed as prerequisite for the enforcement of rights such as damage compensation, rectification, deletion or restriction.
The legal requirement to inform "at the time when personal data are obtained" must be interpreted in a way that data subjects must be informed before the data processing has been started. This applies to the case in which the data has been collected directly from the data subject as it is the case for data that is collected on a website or app.
The law requires the information to be given "in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child". One way of fulfilling this requirement is to layer the website/app privacy notice, makting it more accesible and clear.
Procedure for information provision The way of information provision in the company should be defined and documented. This may be carried out by means of a transparency directive.
Information of data subjects Notification of data subjects about relevant data processing activities, either by means of electronic or physical privacy notices.
>> Find out which other data protection obligations have to be considered with respect to European data protection law.
familiar with the characteristics of small and large companies
experienced in communicating with data protection authorities
active in data protection for over 10 years.
.png){kind=small}
.png){kind=small}
.png){kind=small}
.png){kind=small}
