Start a new topic and get direct answers from the Expert Advice Community.
CREATE NEW TOPIC +Guest
... make it easier for customer that it can cover a Business Continuity Management System based on both standards.
These articles will provide you further explanation about BS25999:
- What is BS 25999? https://advisera.com/27001academy/what-is-bs-25999/
- ISO 22301 vs. BS 25999-2 â An Infographic https://advisera.com/27001academy/blog/2012/05/22/iso-22301-vs-bs-25999-2-an-infographic/
... ISO 17025 vs. ISO 9001 â Main differences and similarities - https://advisera.com/17025academy/blog/2019/07/11/iso-17025-vs-iso-9001-main-differences-and-similarities//
What is ISO 17025? - https://advisera.com/17025academy/what-is-iso-17025/
Diagram of ISO 17025 Implementation Process - https://info.advisera.com/17025academy/free-download/diagram-of-iso-17025-implementation-process
Free webinar on demand - Overview of ISO 9001 implementation steps - https://advisera.com/9001academy/webinar/overview-of-iso-9001-implementation-steps-free-webinar-on-demand/ ementation-steps-free-webinar-on-demand/
You can minimize implementation time with our ISO 9001:2015 Documentation Toolkit - https://advisera.com/9001academy/iso-9001-documentation-toolkit/
You can enroll for free in this course - ISO 9001:2015 Foundations Course - https://advisera.com/training/iso-9001-foundations-course/
You can enroll for free in this course - ISO 9001:2015 Internal Auditor Course - https://advisera.com/training/iso-9001-internal-auditor-course/
- book â Discover ISO 9001:2015 Through Practical Examples â https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
... or Course vs. Lead Implementer Course â Which one to go for? https://advisera.com/27001academy/blog/2014/06/16/lead-auditor-course-vs-lead-implementer-course-which-one-to-go-for/
This material will also help you regarding ISO 27001 personnel certifications:
- ISO 27001 Lead Auditor Course preparation training [free webinar on demand] https://advisera.com/training/iso-27001-lead-auditor-course/
For courses related to these certifications, please see:
- ISO 27001:2013 Lead auditor course https://advisera.com/training/iso-27001-lead-auditor-course/
- ISO 27001:2013 Lead implementer course https://advisera.com/training/iso-27001-lead-implementer-course/
... toring the data ?
Answer:
You certainly can. The company you will use for storage services will be acting as you processor if you will be using it to store personal data. When using a processor you need to be compliant with the provisions of art. 28 of the GDPR. If you want to find out more about processors and controllers check out this article EU GDPR controller vs. processor â What are the differences? (https://advisera.com/eugdpracademy/knowledgebase/eu-gdpr-controller-vs-processor-what-are-the-differences/)
... ep their CVs you would need to rely on either legitimate interest or consent.
3. If an employee applies over the internet, how is Consent generally obtained?
Answer:
As I mentioned while answering your question consent is not usually used in recruitment. However, if you want to consent over the internet usual there is a checkbox that the data subject needs to check.
4. Could the applicants' consent be considered given freely s the job applicant is giving their personal data on the application?
Answer:
The lawful ground for processing CVs is pursuance of a contract and not consent.
5. Also, what are the definitions of Legit Interest Purpose?
Answer:
Legitimate interests mean that the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The GDPR highlights certain purposes that either âconstitutesâ legitimate interest or âshould be regarded asâ a legitimate interest. These are fraud prevention, network, and information security; and avoiding possible criminal acts or threats to public security. There are just some examples.
6. Lastly, do you have guidance on how other clients have documented their use of Salesforce? I believe Salesforce is used to collect names and business email address for marketing purposes.
Answer:
Usually, Salesforce should be considered a processor on behalf of its clients and a Data Processing Agreement should be in place between Salesforce and its Clients. If you use Salesforce to collect data ensure that you have a lawful basis correctly identified in this case it would be either consent or legitimate interest. If you want to find out more about marketing and GDPR check put this free webinar How GDPR affects marketing practices: https://advisera.com/eugdpracademy/webinar/how-gdpr-affects-marketing-practices-free-webinar-on-demand/
... 5 process vs procedure - some practical examples: https://advisera.com/9001academy/blog/2016/01/19/iso-90012015-process-vs-procedure-some-practical-examples/
- Article - ISO 9001: The importance of the process approach: https://advisera.com/9001academy/blog/2015/12/01/iso-9001-the-importance-of-the-process-approach/
- Book â Discover ISO 9001:2015 through practical examples: https://advisera.com/books/discover-iso-9001-2015-through-practical-examples/
- Free on-line training â ISO 9001:2015 Foundations: https://advisera.com/training/iso-9001-foundations-course/