{"id":8993,"date":"2022-01-30T12:30:30","date_gmt":"2022-01-30T11:30:30","guid":{"rendered":"https:\/\/korolko.pl\/?p=8993"},"modified":"2022-08-18T17:39:08","modified_gmt":"2022-08-18T15:39:08","slug":"personal-data-processing-definition-in-gdpr","status":"publish","type":"post","link":"https:\/\/korolko.pl\/en\/blog\/personal-data-processing-definition-in-gdpr\/","title":{"rendered":"Personal data processing definition in GDPR"},"content":{"rendered":"<div class=\"nolwrap\"><p style=\"text-align: justify;\">In <a href=\"https:\/\/korolko.pl\/en\/blog\/what-are-personal-data\/\">the previous post<\/a> I explained what data should be considered to be <a href=\"https:\/\/korolko.pl\/en\/blog\/what-are-personal-data\/\">personal data<\/a>. Now I would like to concentrate on the second definition from article 4 of GDPR <span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_8993_1('footnote_plugin_reference_8993_1_1');\" onkeypress=\"footnote_moveToReference_8993_1('footnote_plugin_reference_8993_1_1');\" ><sup id=\"footnote_plugin_tooltip_8993_1_1\" class=\"footnote_plugin_tooltip_text\">[1]<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_8993_1_1\" class=\"footnote_tooltip\">Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation)<\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_8993_1_1').tooltip({ tip: '#footnote_plugin_tooltip_text_8993_1_1', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script> explaining what <strong>personal data processing<\/strong>\u00a0is.<\/p>\n<h3>Any operation performed on personal data<\/h3>\n<p style=\"text-align: justify;\">According to the article 4 p. 2) of GDPR, personal data processing \u201c<strong>means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction<\/strong>\u201d.<\/p>\n<p style=\"text-align: justify;\">The definition construed in such way makes everything clear \u2013 <strong>all activities connected with personal data should be qualified as processing<\/strong>. The catalogue of the activities determined in GDPR is open by use of the term \u201csuch as\u201d. Mentioned actions are therefore only examples, but it is difficult to imagine some other activities related to personal data. However, if anyone is able to find out any other, such action will be processing as well.<\/p>\n<p style=\"text-align: justify;\">Personal data processing starts form data collection (receiving from users, clients or contractors) and covers all what happen to them until the moment of deletion. After deletion of data processing is over.<\/p>\n<h3>Processing whether or not by automated means<\/h3>\n<p style=\"text-align: justify;\">In the definition contained in GDPR it is stipulated that personal data processing covers both automated and not automated activities. Therefore <strong>it does not matter whether data is processed within computer systems or only manually on paper \u2013 in each case the rules of processing determined in GDPR apply<\/strong>.<\/p>\n<h3>Examples from jurisprudence<\/h3>\n<p style=\"text-align: justify;\">There are not much doubts about the definition of personal data processing. However, it is worthy to supplement the above theory with examples form court decisions. Because the definition from GDPR is very similar to the definition from the Polish Act on Personal Data Processing which was in force before GDPR, we can look at older judgments.<\/p>\n<ul>\n<li style=\"text-align: justify;\"><strong>Requiring personal data is factual activity which precedes collection of personal data. It does not constitute personal data processing<\/strong> yet and therefore is not cot covered by the provisions of the Act on Personal Data Processing. If employer asks labor association to send to him list of employees but these data are note submitted to him, there is no personal data processing. \u2013 judgment of Supreme Administrative Court of 28<sup>th<\/sup> June 2011, files no. I OSK 1264\/10.<\/li>\n<li style=\"text-align: justify;\"><strong>Making available name and last name<\/strong> by the district head <strong>on the website<\/strong> of the district, c<strong>onstitutes personal data processing<\/strong> \u2013 judgment of Voivodship Administrative Court in Warsaw of 24<sup>th<\/sup> November 2011, files no. II SA\/Wa 1828\/11.<\/li>\n<li style=\"text-align: justify;\"><strong>Collecting statements containing personal data<\/strong> of heating oil <strong>constitutes personal data processing<\/strong> \u2013 judgment of Voivodship Administrative Court in Bydgoszcz of 13<sup>th<\/sup> February 2013, files no. I SA\/Bd 1012\/12.<\/li>\n<\/ul>\n<\/div><div class=\"speaker-mute footnotes_reference_container\"> <div class=\"footnote_container_prepare\"><p><span role=\"button\" tabindex=\"0\" class=\"footnote_reference_container_label pointer\" onclick=\"footnote_expand_collapse_reference_container_8993_1();\">Przypisy<\/span><span role=\"button\" tabindex=\"0\" class=\"footnote_reference_container_collapse_button\" style=\"display: none;\" onclick=\"footnote_expand_collapse_reference_container_8993_1();\">[<a id=\"footnote_reference_container_collapse_button_8993_1\">+<\/a>]<\/span><\/p><\/div> <div id=\"footnote_references_container_8993_1\" style=\"\"><table class=\"footnotes_table footnote-reference-container\"><caption class=\"accessibility\">Przypisy<\/caption> <tbody> \r\n\r\n<tr class=\"footnotes_plugin_reference_row\"> <th scope=\"row\" class=\"footnote_plugin_index_combi pointer\"  onclick=\"footnote_moveToAnchor_8993_1('footnote_plugin_tooltip_8993_1_1');\"><a id=\"footnote_plugin_reference_8993_1_1\" class=\"footnote_backlink\"><span class=\"footnote_index_arrow\">&#8593;<\/span>1<\/a><\/th> <td class=\"footnote_plugin_text\">Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation)<\/td><\/tr>\r\n\r\n <\/tbody> <\/table> <\/div><\/div><script type=\"text\/javascript\"> function footnote_expand_reference_container_8993_1() { jQuery('#footnote_references_container_8993_1').show(); jQuery('#footnote_reference_container_collapse_button_8993_1').text('\u2212'); } function footnote_collapse_reference_container_8993_1() { jQuery('#footnote_references_container_8993_1').hide(); jQuery('#footnote_reference_container_collapse_button_8993_1').text('+'); } function footnote_expand_collapse_reference_container_8993_1() { if (jQuery('#footnote_references_container_8993_1').is(':hidden')) { footnote_expand_reference_container_8993_1(); } else { footnote_collapse_reference_container_8993_1(); } } function footnote_moveToReference_8993_1(p_str_TargetID) { footnote_expand_reference_container_8993_1(); var l_obj_Target = jQuery('#' + p_str_TargetID); if (l_obj_Target.length) { jQuery( 'html, body' ).delay( 0 ); jQuery('html, body').animate({ scrollTop: l_obj_Target.offset().top - window.innerHeight * 0.2 }, 380); } } function footnote_moveToAnchor_8993_1(p_str_TargetID) { footnote_expand_reference_container_8993_1(); var l_obj_Target = jQuery('#' + p_str_TargetID); if (l_obj_Target.length) { jQuery( 'html, body' ).delay( 0 ); jQuery('html, body').animate({ scrollTop: l_obj_Target.offset().top - window.innerHeight * 0.2 }, 380); } }<\/script>","protected":false},"excerpt":{"rendered":"<p>In the previous post I explained what data should be considered to be personal data. Now I would like to concentrate on the second definition from article 4 of GDPR explaining what personal data processing\u00a0is.<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_wp_rev_ctl_limit":""},"categories":[315],"tags":[769,317,360,319],"post_series":[],"class_list":["post-8993","post","type-post","status-publish","format-standard","hentry","category-personal-data-protection","tag-gdpr","tag-personal-data","tag-personal-data-processing","tag-personal-data-protection","entry","no-media"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/posts\/8993"}],"collection":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/comments?post=8993"}],"version-history":[{"count":0,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/posts\/8993\/revisions"}],"wp:attachment":[{"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/media?parent=8993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/categories?post=8993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/tags?post=8993"},{"taxonomy":"post_series","embeddable":true,"href":"https:\/\/korolko.pl\/en\/wp-json\/wp\/v2\/post_series?post=8993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}