Parental Consent & Consent withdrawal forms

2. Can we leave the forms 4.1 & 4.2 as templates to be completed when needed? If not, can we use“for the purpose of carrying out business with Grazing and communication” as specification of the purpose for processing activity?
3. On the Personal Protection Policy some of the roles specified don’t exist on our company organisation, should them be replaced? E.g. Procurement Manager, Marketing Manager, etc. Could these be replaced by “Administration Team”?

Answers:

1. The two forms you refer to are to be used only if your services are aimed at minors thus the consent of the parents/legal guardians would be necessary. If you don't intend to sell to minors the forms are not relevant to you.
2. The consent forms are to be used only if you rely your processing activities on consent. In your case most likely you will process the personal data of individuals placing order s based on “contractual necessity” since you need to know the contact details of the individual to deliver the order to them.
3. The roles in the “Personal Data Protection Policy” are to be used just as examples and they can be replaced by any relevant roles in your company that deal with a specific topic.

To learn more about the EU GDPR check out our free “EU GDPR Foundations Course” https://advisera.com/training/eu-gdpr-foundations-course//