Privacy Management
Processing Register as a Transparency Instrument.
Complete recording of all processing activities per GDPR Art. 30 with all required information.
Obligations per Art. 30 GDPR
- Name and contact details of the controller
- Purposes of processing
- Categories of data subjects and personal data
- Categories of recipients
- Planned deletion periods
- General description of TOMs per Art. 32
Form Requirements
- Written or electronic form
- Available to the supervisory authority on request
- Regular updating (at least annually)
- Retention for the duration of processing + 3 years
Data Processing Agreements (DPA)
- Subject and duration of processing
- Nature and purpose of processing
- Categories of personal data and data subjects
- Obligations and rights of the controller