EU GDPR - Expert Advice Community

Guest

Guest

Create New Topic As guest or Sign in

HTML tags are not allowed

Assign topic to the user

  • Privacy Notices

    Do we need seperate or indeed any privacy notices for forms filled out by staff. These forms are not processed by any 3rd party. they are internal only and are for the purpose for someone to fulfil their role. Like a form requesting permission to access a folder.

  • Can company share their employee personal data?

    I need to ask a question because I was not able to find one of the situation which makes me confused about GDPR. Company which have become our customer and bought service from us do share via email his employees personal data (name, last name and email) so we can create access for them on our portal. When they access portal, they will be asked to accept privacy policy and give consent (GDPR stuff)... is that ok from law side, to have personal information of company employees and after they login for the first time to accept policy? Also what will happen if some of the users never login, or don`t login for a long period and we made account for them, but user haven`t accepted privacy policy and gave consent to us?

    How can we overcome this situation? Do you know if we can still be GDPR compliant with this situation?

  • Acting as DPO

    I wonder if I could act as DPO in a little company being Infrastructure & Security manager. This could be a position with conflict of interest. Even if DPO is not mandatory in such a little company.

  • Cancellazione dati positivi in corso presenti nelle banche dati sic (crif. ctc. experian)

    Salve, è possibile cancellare in banche dati sic (crif, ctc ed experian) dati positivi in corso?? (cioè finanziamenti in corso positivi).

  • Applicability of employee data

    If we don’t have any employees in any of the GDPR geographies, then employee data isn’t applicable when completing the GDPR documentation. Is that correct?

  • Complying with EU GDPR

    My company is based in UAE however we provide our services Internationally which means we have to comply with the GDPR rules and regulations and one of them is to have a GDPR officer, is it compulsory to have EU - GDPR Office & representative in Europe?

  • DPIA’s and Clients' data

    I have a question around DPIA’s and our Clients data

    As a security Monitoring company providing SOC-as-a-service, we are a ‘processor’ to our clients, and we monitor their networks/systems under contractual obligation.

    Would we be required to carry out DPIA’s on our Client Data as a processor as well as our own data as a controller?

    From what I understand we would carry out a DPIA on their data if they request that we do so. Is this correct?

    If this is not clear or you need more information, feel free to let me know.

  • Complying with GDPR

    I have a question regarding GDPR. We would like to share specific information with registered members that belong to research/education institutions. When the user registers he would give information about institution where he works. Can we comply with GDPR if we wanted to check whether this person works at the institution as he stated (via this possibility would be explaied in privacy policy before registration).

  • Question about joint controller

    We have a mobile application that acts as a shopping mall - users register in our application (so we process their personal data), and we have various shops that offer their products and services through our application. Once a user wants to purchase a product/service, we process the payment through the payment processor, and forward the personal data of the user to this shop so that the shop can deliver the product/service directly to the user. 


    So the question is: are we joint controllers with these shops according to GDPR?

  • Videos and names

    Hi there Dejan,

    I just have a quick question. I recorded videos of my zoom teaching and I always had verbal consent of my students, since the video only shows me, nobody or nothing else. I do say the first name of my students though, when I correct them. Now since I am teaching a lot less online again I have been asked to put up a youtube channel. I initially didn't think I would ever use the recordings to more than just for my own analyzing process. But now I was wondering, is it a data right conflict if I say people's first name in the videos and would upload them publicly? They do not talk and most of them I could probably contact and ask if they're ok with it. Just in case I miss a name somewhere of someone I didn't ask, and I repeat I did never mention the last name nor are they seen anywhere, nor do I say anything but a correction to them, would this be considered a violation of data/personal rights already?
    Thank you so much in advance. I am sure you usually have other clients. Thank you so much for taking the time to read this.

Page 1 of 89 pages