Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
GDPR in a tourism company
We are a tourism company located in Costa Rica, we bring people from Europe to travel to Central America. I wanted to know what option we would need to be able to comply with the law? -
Confidentiality agreement
After reviewing the documentation provided, it has been observed that there is no confidentiality agreement in accordance with article 28.3.b of the GDPR. Could you send us a model please?" -
GDPR Compliance with Google
I want to know if storing personal data of customers in Google Sheets and Gmail is GDPR compliant and which actions should my company make to comply against GDPR -
Parental Consent & Consent withdrawal forms
1. Can we refrain from completing “Parental Consent & Consent withdrawal forms” as due to the nature of our business we do not handle information for under 18 y/o? (4.3 &4.4) -
Cross border data transfer
Our company is outside of the EU but we have contractors - citizens of EU and they provide us with personal data. Is this Cross border data transfer? -
Disclaimers for the footer of emails
Do you also provide disclaimers for the footer of emails? -
GDPR Consent for existing user
Do we, as a data processor, have to gain consent from our existing users, or we can just inform them about updating our privacy policy and present them with their rights? -
“opt-in” consent
1. For marketing/sales are we required to get new consent for existing leads/prospects/clients OR are we ok to only send the new consent moving forward as part of GDPR compliance” -
Data Processing Agreement and Data Processing Addendum
We usually have our on bilateral commercial agreement with our service provider/partner/supplier. After the implementation of the GDPR, we need to issue another Data Processing Addendum to our partner/supplier. How about the agreement sign after the 25 of May 2018 onward? Do we still need to sign a commercial agreement + Data Processing Addendum? or just All in One agreement with our partner/supplier/service provider? what is the different between Data Processing -
Processing protocol
1. When exactly and how often do I have to complete a processing protocol?