Search results for "iso17025 vs gmp"

Major and minor nonconformities

Quality assurance vs quality control

Website and data storage

... toring the data ?

Answer:

You certainly can. The company you will use for storage services will be acting as you processor if you will be using it to store personal data. When using a processor you need to be compliant with the provisions of art. 28 of the GDPR. If you want to find out more about processors and controllers check out this article EU GDPR controller vs. processor – What are the differences? (https://advisera.com/eugdpracademy/knowledgebase/eu-gdpr-controller-vs-processor-what-are-the-differences/)

EU GDPR Questions

... ep their CVs you would need to rely on either legitimate interest or consent.

3. If an employee applies over the internet, how is Consent generally obtained?

Answer:

As I mentioned while answering your question consent is not usually used in recruitment. However, if you want to consent over the internet usual there is a checkbox that the data subject needs to check.

4. Could the applicants' consent be considered given freely s the job applicant is giving their personal data on the application?

Answer:

The lawful ground for processing CVs is pursuance of a contract and not consent.

5. Also, what are the definitions of Legit Interest Purpose?

Answer:

Legitimate interests mean that the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The GDPR highlights certain purposes that either ‘constitutes’ legitimate interest or ‘should be regarded as’ a legitimate interest. These are fraud prevention, network, and information security; and avoiding possible criminal acts or threats to public security. There are just some examples.

6. Lastly, do you have guidance on how other clients have documented their use of Salesforce? I believe Salesforce is used to collect names and business email address for marketing purposes.

Answer:

Usually, Salesforce should be considered a processor on behalf of its clients and a Data Processing Agreement should be in place between Salesforce and its Clients. If you use Salesforce to collect data ensure that you have a lawful basis correctly identified in this case it would be either consent or legitimate interest. If you want to find out more about marketing and GDPR check put this free webinar How GDPR affects marketing practices: https://advisera.com/eugdpracademy/webinar/how-gdpr-affects-marketing-practices-free-webinar-on-demand/

Managing processes in a process map

... 5 process vs procedure - some practical examples: https://advisera.com/9001academy/blog/2016/01/19/iso-90012015-process-vs-procedure-some-practical-examples/
- Article - ISO 9001: The importance of the process approach: https://advisera.com/9001academy/blog/2015/12/01/iso-9001-the-importance-of-the-process-approach/
- Book – Discover ISO 9001:2015 through practical examples: https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
- Free on-line training – ISO 9001:2015 Foundations: https://advisera.com/training/iso-9001-foundations-course/

FSMS 22000 vs QMS

ISMS vs ISMF

ISO 9001 vs ISO 22000

Responsible for personnel

... visitors, the owner is the person of the organization to whom this visitor will interact with .

As for the risk owner, this one should be someone related to physical security, since most of the related risks to personnel are related to physical access to assets and information.

This article will provide you further explanation about risk owners:
- Risk owners vs. asset owners in ISO 27001:2013 https://advisera.com/27001academy/knowledgebase/risk-owners-vs-asset-owners-in-iso-270012013/

Conditions to issue a valide certificate

... ce visits vs. certification audits - https://advisera.com/27001academy/knowledgebase/surveillance-visits-vs-certification-audits/
- free online training ISO 9001:2015 Foundations Course – https://advisera.com/training/iso-9001-foundations-course/
- book – Discover ISO 9001:2 015 Through Practical Examples – https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/