Art. 21 GDPR – Right to object
Art. 21 GDPR Right to object The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing…
Art. 21 GDPR Right to object The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing…
Art. 20 GDPRRight to data portability The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to…
Art. 19 GDPR Notification obligation regarding rectification or erasure of personal data or restriction of processing The controller shall communicate any rectification or erasure of personal data or restriction…
Art. 18 GDPRRight to restriction of processing The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: the…
Art. 17 GDPRRight to erasure (‘right to be forgotten’) The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or…
Art. 16 GDPR Right to rectification The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him…
Art. 15 GDPR Right of access by the data subject The data subject shall have the right to obtain from the controller confirmation as to whether or not personal…
Art. 14 GDPRInformation to be provided where personal data have not been obtained from the data subject Where personal data have not been obtained from the data subject, the…
Art. 13 GDPRInformation to be provided where personal data are collected from the data subject Where personal data relating to a data subject are collected from the data subject,…
Art. 12 GDPR Transparent information, communication and modalities for the exercise of the rights of the data subject The controller shall take appropriate measures to provide any information referred…
Art. 11 GDPR Processing which does not require identification If the purposes for which a controller processes personal data do not or do no longer require the identification of…
Art. 10 GDPR Processing of personal data relating to criminal convictions and offences Processing of personal data relating to criminal convictions and offences or related security measures based on…
Art. 9 GDPRProcessing of special categories of personal data Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and…
Art. 8 GDPR Conditions applicable to child’s consent in relation to information society services Where point (a) of Article 6(1) applies, in relation to the offer of information society…
Art. 7 GDPR Conditions for consent Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his…
Art. 6 GDPR Lawfulness of processing Processing shall be lawful only if and to the extent that at least one of the following applies: the data subject has given…
Art. 5 GDPRPrinciples relating to processing of personal data Personal data shall be: processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness…
Art. 4 GDPRDefinitions For the purposes of this Regulation: ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is…
Art. 3 GDPRTerritorial scope This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in…
Art. 2 GDPRMaterial scope This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of…
Art. 1 GDPRSubject-matter and objectives This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to…
Download a PDF version of this template here. You are entitled to request us to erase any personal data we hold about you under EU General Data Protection…
This data processing agreement is adapted from the Proton Mail DPA, which can be found on this page. Organizations may use the following document as part of their GDPR…
Privacy Impact Assessment
How to conduct a Data Protection Impact Assessment (template included) A Data Protection Impact Assessment (DPIA) is required under the GDPR any time you begin a new project that…