Article 1÷

Yes, in the privacy notice the employer should inform the employee if data are transferred to third-parties processors, however, the employer does not need to specify the name (the provider of a service may change during time).The employer, however, does not need your consent, he must inform you. Check if somewhere in the employees' privacy notice it is written that data may be transferred to third-parties providers.

If you need more information about the EU GDPR and the HR sector, here you can find an article:

• How the GDPR could impact your HR department https://advisera.com/eugdpracademy/blog/2018/02/22/how-the-gdpr-could-impact-your-hr-department/

If you want to have an overview on EU GDPR compliance you can consider enrolling in our free EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course// 

Thanks.  They did not include in privacy notice.  Is there any penalty for them.  I am very unhappy that this was being done for the last four years.

Yes, article 83 paragraph 5 GDPR shows a fine of up to 20 billion Euro or 4% total revenue for infringement of data subject rights as the information to be provided in the privacy notice. Contact your local Data Protection Authority for more advice.

Thank you very much.  Your advice and your service here is priceless.  I will check with the UK Commissioner.  I guess as it is not a Data Breach I will not be entitled to any compensation.

I think the Data Processor should also have told me that they were processing my sensitive data or at least checked that the Data Controller had informed me.