The Chef may have found the perfect audience for her new eyewear business… but the GDPR is not always impressed by creative marketing ideas. In this episode, we explore the concept of further processing and why using personal data for a new purpose is not always as straightforward as it seems. The key question: Is the new purpose compatible with the original one?
In this new Glossary video, the Specialist introduces three essential GDPR principles: data minimization, accuracy and storage limitation. From only collecting the data you need, to keeping it accurate and knowing when it should be deleted; the Chef is determined to get the basics right.
The Chef takes data protection seriously: limiting access, using passwords, putting procedures in place. But under the GDPR, doing the right thing is not enough. You also need to demonstrate that you are compliant.
The Chef just received a letter from the DPA. They’re asking about possible issues in the restaurant’s data processing practices: an RFI. Will our Specialist save the day?
The Chef is in trouble, and the Data Protection Authority is knocking. Can our Specialist save the day?
But what about the transfer of her customers’ personal data outside the EEA? Our specialist has a few concerns…
Our specialist teaches the chef about the characteristics and duties of a DPO. Perhaps our chef is not the right candidate after all....
Our chef wonders if every business needs to appoint a DPO, including her restaurant... The specialist guides her through the world of Data Protection Officers.
Chaos in the puppet theatre! The new IT service provider sent our chef an email saying she must sign a data processing agremeent (DPA). But why? And why is this important?
Our chef is about to launch an online reservation system. The web developer mentioned something about a… privacy notice?
Our chef is asked by one of her suppliers to sign a data processing agreement. Her restaurant is named as the data controller. What is that all about?
Our chef clearly gives her consent, but is that enough? She discovers more about asking consent and other legal grounds for processing personal data under the GDPR. So what it is that she should keep in mind when it comes to ‘consent’?
Our chef is concerned about accidentally sending a dinner confirmation to the wrong guest. Do you know what the consequences are? Discover it together with the chef.
The fired sous-chef wants to exercise his right of access and requests a copy of his personal data…. Specialist to the rescue!
While processing ingredients in her kitchen, our chef is pondering over the frequent mentions of "processing" by the Faros data protection specialists. That must be something different, right? Discover along with her in our new glossary video.
In this first video you will get a taste of how we will unravel the secrets of data protection law. Of course, we start at the beginning: ‘GDPR unveiled’.
Now that our chef has gotten a first flavour of GDPR, she continues to explore the world of GDPR in the second episode of our Faros Glossary. What will she encounter next?