Expert Advice Community

Guest

Contracting and GDPR

  Quote
Guest
Guest user Created:   Jul 08, 2018 Last commented:   Jul 08, 2018

Contracting and GDPR

1. My company is registered in Ukraine, the "third country" from GDPR point of view. The company provides software development services on contractual basis for EU-located companies, not for individuals/ To perform the contracts we need to know contact data such as e-mail, phone, name of the served company employee. the question 1 - should we sign some additional agreements to transfer these data required to perform contracts to "third country"?
0 1

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Andrei Hanganu Jul 08, 2018
2. We buy contacts data bases from Poland(EU) company for direct marketing purposes. Should we inform the addressee from these DBs about source of their contacts and is this business lawfully at all?

Answers:

1. To transfer personal data from EU to a third country certain safeguards need to be set up according to Chapter V of the EU GDPR “Transfers of personal data to third countries or international organizations” (https://advisera.com/eugdpracademy/gdpr-text/transfers-of-personal-data-to-third-countries-or-international-organisations/). One of the most used safeguards are the Standard Contr actual Clauses which were drafted by the EU Commission to regulate the transfer the data to third countries. To find out more about transfers of personal data check out webinar “How to make personal data transfers to other countries compliant with GDPR” (https://advisera.com/eugdpracademy/webinar/how-to-make-personal-data-transfers-compliant-with-gdpr-free-webinar-on-demand/).

2. When obtaining personal data from a third party you would need to provide to the data subject an adequate Privacy Notice as required by article 14 of the EU GDPR “Information to be provided where personal data have not been obtained from the data subject” (https://advisera.com/eugdpracademy/gdpr/information-to-be-provided-where-personal-data-have-not-been-obtained-from-the-data-subject/). To find out more about privacy notices check out our webinar “Privacy Notices Under the EU GDPR” (https://advisera.com/eugdpracademy/webinar/privacy-notices-under-the-eu-gdpr-free-webinar-on-demand/).
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Jul 08, 2018

Jul 08, 2018

Suggested Topics

Guest user Created:   Oct 16, 2019 EU GDPR
Replies: 1
0 1

Questions regarding GDPR

Guest user Created:   Jun 22, 2022 EU GDPR
Replies: 1
0 0

Doubts about ODPR or GDPR