EU GDPR - Expert Advice Community

Home / EU GDPR

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 ISO 9001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS register of requirements Internal Audit Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Certification ISO 14001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

Personal Data Protection Policy
Why Personal Data Protection Policy is a top level management ? To demonstrate the fulfillment of obligations of Data controller?
Privacy Policy vs. Privacy Notice and Data breaches
I would love to ask you a few questions about GDPR.
How telecom companies appoint DPO and Data Processor
Our company is a telephone company with about 1,500 customers to whom we invoice every month telephone traffic. We need to know if it is obligatory to name two figures mentioned in the GDPR:
EU GDPR requirements for US based company
We are a US based company that has EU clients but we do not have an EU location or EU based employees. Are there any differences in the mandatory GDPR requirements since we do not have an EU location or employee?
Legitimate interest
We know all the legalities of it, but it is not clear to us if we can claim legitimate interest to market certain people that voluntarily subscribed to, for instance, our webinars.
DPA in EU
For a company based in Japan, other than complying to the GDPR law, do we have to report to a DPA in EU even if our company is only based In Japan? If yes who do we contact?
Keeping personal data of clients
Hello, being in the hotel industry, it is important to recognize a repeater guest. But I understand that personal data of clients should not be kept once they are no longer our customers. Is there any provision for such case in the GDPR?
Questionnaire
Trying to identify if as a controller we need to send a questionnaire to our processors or is putting a DPA with there assurances they are compliant sufficient?
10 days period
Where do the 10 days for the identity check in the request for information come from? This can be found in the flowchart "Flowchart of the request for access of data subjects" in the block "No response within 10 working days"?
Controller and Processor sheet
Both the controller sheet and the processor sheet must be filled in / completed?