What's a processing activity?

We call "Processing Activity" every type of operation performed by your company that involves personal information.

A processing activity can include collecting, consulting, recording, organizing, structuring storing, adapting, altering, retrieving, using, disclosing, disseminating, aligning, combining, erasing and destructing personal data.

e.g. collecting email addresses to send newsletters.

Can I transfer data outside the European Union?

Location where data is stored is a paramount criteria for controllers. If servers hosting data are located in the European Union or in an adequate country, data transfers can be operated without additional safeguards as these countries’ legislations are protective enough of personal data and individuals’ rights.

What are the Foreign Intelligence Surveillance Act (FISA) and Cloud Act?

Foreign Intelligence Surveillance Act (FISA) and Cloud Act are U.S legislations obliging American cloud providers to provide upon request to U.S intelligence agencies and courts individuals' data that they store, control and manage in the United States or even remotely.

What's a third-party?

A third party is anyone outside the business and the individual concerned who can access the personal data you’re responsible for. There are 2 types of third parties:

Become GDPR compliant in minutes!

Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.