19/04/2020
• Right to be informed about the collection and use of their personal data
• Direct collection: at the time of collection
• Indirect collection: in the first communication limited to one month
• Exemption: Disproportionate effort or data subject is already aware
Transparent communication and information
1 2
• The name and contact details of your organisation • The name and contact details of your organisation
• The name and contact details of your representative • The name and contact details of your representative
• The contact details of your data protection officer • The contact details of your data protection officer
• The purposes of the processing
• The lawful basis for the processing
• The legitimate interests for the processing
3 4
• The name and contact details of your organisation • The name and contact details of your organisation
• The name and contact details of your representative • The name and contact details of your representative
• The contact details of your data protection officer • The contact details of your data protection officer
• The purposes of the processing • The purposes of the processing
• The lawful basis for the processing • The lawful basis for the processing
• The legitimate interests for the processing • The legitimate interests for the processing
• The categories of personal data obtained • The categories of personal data obtained
• The recipients or categories of recipients of the personal data • The recipients or categories of recipients of the personal data
• The details of transfers of the personal data to any third countries or international • The details of transfers of the personal data to any third countries or international
organisations organisations
• The details of the existence of automated decision-making, including profiling • The details of the existence of automated decision-making, including profiling
• The rights available to individuals in respect of the processing and retention periods
• The right to withdraw consent
• The right to lodge a complaint with a supervisory authority
5 6
19/04/2020
• Exemptions;
o already has the information
o impossible
o disproportionate effort
o seriously impair the achievement of the processing
o required by law to obtain or disclose the personal data
o obligation of professional secrecy regulated by law
NEXT LECTURE
Right of Access and Right of Rectification
7 8