Who's the end user of a processing activity?

The end user is the individual who ultimately uses or is intended to ultimately use a product or a service.

Here are two examples to help you understand:

Intercom is a SaaS company that offers a customer support solution. When a company implements Intercom on its website, customers can use Intercom to ask questions and employees to answer them. Customers and employees will be considered end users of Intercom, and the company its user.
Slack is a SaaS company that offers a B2B messaging platform. The companies that uses Slack are its users and the companies' employees (the ones who will ultimately use the platform to talk and collaborate on internal projects) are considered its end users.

What's a processing activity's Security Measures?

Security measures are any technical or organizational protective measures taken to ensure the confidentiality of personal data, and preserve their integrity and availability.

Do I need Standard Contractual Clauses?

Whether or not you need a standard contractual clause (SCC) for your business depends on a number of factors, including the type of business you operate, the types of data you collect and process, and where you are located.

What's a rights request?

Data subjects have rights upon their personal data: right of access (Article 15), of rectification (Article 16), of erasure (Article 17) and objection (Article 21), right to the restriction of processing (Article 18), right to data portability (Article 20), right not to be subject to an automated individual decision (Article 22).

Become GDPR compliant in minutes!

Privacyboard helps you comply with GDPR easily so you can focus on what's really important for your business.