Art. 15 GDPR – Right of access by the data subject
Art. 15 GDPR Right of access by the data subject The data subject shall have the right to obtain from the controller confirmation as to whether or not personal…
Category: Uncategorized
Art. 14 GDPR – Information to be provided where personal data have not been obtained from the data subject
Art. 14 GDPRInformation to be provided where personal data have not been obtained from the data subject Where personal data have not been obtained from the data subject, the…
Art. 13 GDPR – Information to be provided where personal data are collected from the data subject
Art. 13 GDPRInformation to be provided where personal data are collected from the data subject Where personal data relating to a data subject are collected from the data subject,…
Art. 12 GDPR – Transparent information, communication and modalities for the exercise of the rights of the data subject
Art. 12 GDPR Transparent information, communication and modalities for the exercise of the rights of the data subject The controller shall take appropriate measures to provide any information referred…
Art. 11 GDPR – Processing which does not require identification
Art. 11 GDPR Processing which does not require identification If the purposes for which a controller processes personal data do not or do no longer require the identification of…
Art. 10 GDPR – Processing of personal data relating to criminal convictions and offences
Art. 10 GDPR Processing of personal data relating to criminal convictions and offences Processing of personal data relating to criminal convictions and offences or related security measures based on…
Art. 9 GDPR – Processing of special categories of personal data
Art. 9 GDPRProcessing of special categories of personal data Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and…
Art. 8 GDPR – Conditions applicable to child’s consent in relation to information society services
Art. 8 GDPR Conditions applicable to child’s consent in relation to information society services Where point (a) of Article 6(1) applies, in relation to the offer of information society…
Art. 7 GDPR – Conditions for consent
Art. 7 GDPR Conditions for consent Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his…
Art. 6 GDPR – Lawfulness of processing
Art. 6 GDPR Lawfulness of processing Processing shall be lawful only if and to the extent that at least one of the following applies: the data subject has given…
Art. 5 GDPR – Principles relating to processing of personal data
Art. 5 GDPRPrinciples relating to processing of personal data Personal data shall be: processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness…
Art. 4 GDPR – Definitions
Art. 4 GDPRDefinitions For the purposes of this Regulation: ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is…
Art. 3 GDPR – Territorial scope
Art. 3 GDPRTerritorial scope This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in…
Art. 2 GDPR – Material scope
Art. 2 GDPRMaterial scope This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of…
Art. 1 GDPR – Subject-matter and objectives
Art. 1 GDPRSubject-matter and objectives This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to…
Right to Erasure Request Form (Template)
Download a PDF version of this template here. You are entitled to request us to erase any personal data we hold about you under EU General Data Protection…
Data Processing Agreement (Template)
This data processing agreement is adapted from the ProtonMail DPA, which can be found on this page. Organizations may use the following document as part of their GDPR compliance….
Privacy Impact Assessment
Privacy Impact Assessment
Data Protection Impact Assessment (DPIA)
How to conduct a Data Protection Impact Assessment (template included) A Data Protection Impact Assessment (DPIA) is required under the GDPR any time you begin a new project that…
