EU GDPR - Expert Advice Community

Home / EU GDPR

Discussions

Top Contributors

Rhand Leal

Carlos Pereira da Cruz

Dejan Kosutic

Most Popular Tags

Product: Conformio Product: ISO 27001 Documentation Toolkit Product: ISO 13485 & MDR Integrated Documentation Toolkit ISO 27001 ISO 9001 Product: ISO 27001 & ISO 22301 Premium Documentation Toolkit Risk Assessment Product: ISO 13485 Documentation Toolkit ISMS register of requirements Internal Audit Product: ISO 27001/Risk Assessment Table Product: ISO 27001 & ISO 27017 & ISO 27018 Cloud Documentation Toolkit Certification ISO 14001

Sort by:

Select

CREATE NEW TOPIC +

Guest

Guest

Create New Topic As guest or Sign in

Business department* About business* Organization size*

Title *

Body *

HTML tags are not allowed

Category *

Select

Tags

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Assign topic to the user

Select user

EU GDPR questions
1. What should be the agreement between us (xxx) and the content providers (sub-processors)?
EU GDPR toolkit
The toolkit is made for both data controllers and data processors, right?
Sub-processors
Our software stores personal data on our infrastructure on behalf of our clients, so we are a Processor. We use Zendesk, a ticketing system, where users can report issues. This system is hosted in the US. In this system we will have email addresses from users, mostly only from our contact persons at clients. So not from all users. Should we regard Zendesk as a Sub-Processor with respect to personal data?
Cross reference between 27001 and GDPR
Is there a cross reference between 27001 and GDPR?
Legitimate Interest Assessments template
Is there any template around Legitimate Interest Assessments?
The Data Processing Agreement
Many of our customers, whom we process data are asking for this DPA. It is my understanding that this DPA is a document that we send to OUR suppliers who process data on our behalf, not for our customers whom we process data for. Can you please advise?
B2B company
We are a B2B company, which doesn't directly process the data of the end user. Do the same rules apply here for B2B and B2c companies?
GDPR data
Does data belong to the controller or the subject?
Privacy Shield
In your GDPR training video you outline that "as of the time that the video was created, the United States and Canada was still not recognized as having adequate data protection" Has this change or is this still the case?
User data from 3rd party integrations
Do we need to delete user data from 3rd party integrations? Such as , our users integrate and send their submissions to Google drive, Dropbox or Box. Do we have any obligations to inform 3rd parties about a deletion?