Entrusting processing of personal data
Quite often it happens that an entrepreneur performing operations on personal data does not become their controller. Despite the fact that it processes data, someone else is their controller.
Quite often it happens that an entrepreneur performing operations on personal data does not become their controller. Despite the fact that it processes data, someone else is their controller.
It is the best to avoid sensitive personal data. However, if you must process them, remember that this is only allowed in strictly defined cases.
It often happens that consent to the processing of personal data is not obtained in accordance with GDPR. I explain how to do it correctly.
Controller may not process personal data at his discretion. For this to be possible, there must be a legal basis. Determining this is one of the first steps an entrepreneur should take when dealing with personal data.
In the previous post I explained what data should be considered to be personal data. Now I would like to concentrate on the second definition from article 4 of GDPR explaining what personal data processing is.