What's a processing activity?

We call "Processing Activity" every type of operation performed by your company that involves personal information.

A processing activity can include collecting, consulting, recording, organizing, structuring storing, adapting, altering, retrieving, using, disclosing, disseminating, aligning, combining, erasing and destructing personal data.

e.g. collecting email addresses to send newsletters.

What's a third-party?

A third party is anyone outside the business and the individual concerned who can access the personal data you’re responsible for. There are 2 types of third parties:

What's a processing activity purpose?

The purposes are the principal objectives for which personal data are collected. These objectives should be clearly identified and personal data should never be processed in a way that is inconsistent with them.

What's the legal basis for a processing activity?

To process personal data a valid lawful basis is necessary. There are six available lawful bases for processing:Consent: The data subject has given clear and affirmative consent to the processing of their personal data for a specific purpose.Contract: The processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract.

Become GDPR compliant in minutes!

Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.