What's a retention period for a processing activity?

Personal data cannot be kept indefinitely: a retention period must be determined according to the purpose for which the data was collected.

The idea being to store data "as long as necessary" and "as short as possible", taking into account national legal rules that may impose fixed periods, and then to delete or anonymize them.

What's a processing activity's Security Measures?

Security measures are any technical or organizational protective measures taken to ensure the confidentiality of personal data, and preserve their integrity and availability.

What's a EU Representative?

Under the GDPR, an EU representative is a person or organization that is based in the EU and is designated by a non-EU based organization to serve as a point of contact for individuals whose data is being processed, and for the relevant supervisory authority.

What's a subprocessor in the GDPR?

In the context of the General Data Protection Regulation (GDPR), a subprocessor is a third-party service provider that processes personal data on behalf of another organization, known as the data controller. The GDPR sets out specific rules and requirements for the use of subprocessors, including the need for a written contract between the data controller and the subprocessor.

Become GDPR compliant in minutes!

Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.