What's a processing activity purpose?

The purposes are the principal objectives for which personal data are collected. These objectives should be clearly identified and personal data should never be processed in a way that is inconsistent with them.

For example:

lead data collected initially to attend a demo session should not be reused to sign them up to your newsletter (except if you did receive their explicit consent to do so) ;
video footages from your CCTV initially filmed to protect the facilities shouldn’t be reused to monitor your employees’ break session.

What's a data breach notification

A personal data breach is a breach of security resulting in the destruction, loss, alteration or unauthorized disclosure of personal data.According to Article 33 of the GDPR, as a processor, you must notify controllers of any personal data breach as soon as possible after becoming aware of it and offer your assistance to assess the impacts on data subjects’ lives.

What's a EU Representative?

Under the GDPR, an EU representative is a person or organization that is based in the EU and is designated by a non-EU based organization to serve as a point of contact for individuals whose data is being processed, and for the relevant supervisory authority.

What's a subprocessor in the GDPR?

In the context of the General Data Protection Regulation (GDPR), a subprocessor is a third-party service provider that processes personal data on behalf of another organization, known as the data controller. The GDPR sets out specific rules and requirements for the use of subprocessors, including the need for a written contract between the data controller and the subprocessor.

Become GDPR compliant in minutes!

Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.