Privacy notice/ Privacy policy
Assign topic to the user
2. If there are check boxes near Privacy notice and policy then will it be okay just to tick these boxes and no other actions are required?
3. I also have a question regarding contract and consent. Is it possible to provide all purposes (marketing etc) inside the contract to avoid additional consents?
4. do the contract and consent have to be present in written form or it is possible to have them online and clients can fulfill their personal info, tick the check box for example to send us?
Answers:
1. The Privacy Notice is a document that is meant to be provided to the data subjects either at the time of collecting the personal data if you collect the data directly from the data subject (art. 13 - Information to be provided where personal data are collected from the data subject - https://advisera.com/eugdpracademy/gdpr/information-to-be-provided-where-personal-data-are-collected-from-the-data-subject/) of at a later time when the data is collected indirectly from another source (art. 14 - Information to be provided where personal data have not been obtained from the data subject - https://advisera.com/eugdpracademy/gdpr/information-to-be-provided-where-personal-data-have-not-been-obtained-from-the-data-subject/) .
The Privacy Policy is an internal document of the Company which states that the Company is going to do in order to comply with the EU GDPR.
To find out more about privacy notices check out our webinar “Privacy Notices under the EU GDPR” (https://advisera.com/eugdpracademy/webinar/privacy-notices-under-the-eu-gdpr-free-webinar-on-demand/).
2. There should not be any thick boxes in a privacy notice.
3. According to the provisions of the EU GDPR the consent needs to be freely given, specific, informed and unambiguous indication of the individual’s wishes. This also means that ff the relevant processing has multiple purposes, consent must be given for all of them.
4. The consent does not necessarily need to be in written form you could also use the online environment. Just make sure that an affirmative action from the data subject is required and that you can prove who is the individual giving the consent. To learn more about consent check out our webinar “ How to handle consents under GDPR” (https://advisera.com/eugdpracademy/webinar/how-to-handle-consents-under-gdpr-free-webinar-on-demand/)
Comment as guest or Sign in
May 09, 2018