SPRING DISCOUNT
Get 30% off on toolkits, course exams, and Conformio yearly plans.
Limited-time offer – ends April 25, 2024
Guest
Guest
Create New Topic As guest or Sign in
Assign topic to the user
-
Supervisory authority
How do I determine who the supervisory authority is? -
Processor Sub Processor Agreement
For the prepaid airtime, all the prepaid airtime supplier deal with the supplier and service provider and supplier, we are all processor and sub-processor and it is bilateral way. how do we draft it in processor sub processor agreement? as we all could be both processor and sub processor at any time. we cant put it as A is a processor, B is a sub processor, however the relationship and status changed as A could be sub processor and B could be processor at anytime, as their identity or status always change due to bilateral. How should we identify both Party and draft it in the agreement? Please advise. Thanks -
GDPR compliance queries
As 25-May is approaching, we have few queries about GDPR compliance. -
GDPR documents
I have just finished off our GDPR documentation, and wondered why you haven’t included in your GDPR pack the following process documents: -
Data Subject Rights under the EU GDPR
If we, as a Processor, get a DSAR, we are not supposed to respond to it, correct? We are supposed to alert the controller of the data so that they can respond. And that response might require some cooperation or action from us, correct? -
GDRP - Transfer to the US
My company is based in the US but has several affiliates / subsidiaries in the EU. -
Data Breach Response and Notification Procedure
In the document 9.1_Data_B reach_Response_and_Notification_Procedure_EN.docx, section 11 ‘Managing records kept on the basis of this document’, you have a table with a number of sample records. I am struggling to understand some of the examples you provided. -
GDPR privacy policy
Hi there, we are writing our privacy policy notice as a Controller in this case. We are a live chat software company. In this scenario we are writing the policy towards people who would visit our website and include their name/identifiable information in our information field so they can chat with us about our software. That means anyone in any country in the EU using our live chat could hypothetically be a data subject, even though we are an American company. -
Remittance Group and GDPR
Hi there, we are remittance Group, we deal with banks/remittance/agents in EU & all over the world. We are processor. The banks/agents are using our API. Our processing activities and central administration take place in Malaysia. -
Email subscription
If we have mailed / e mailed a subscription list to query if they want to continue receiving newsletters - if they do not respond do we have to no longer e mail them?