The individual has the right to be informed about how and why their personal data is being processed. Grounds for processing is usually explained when asking for the consent from the individual. Individual has a right to be informed after giving the consent as well, meaning that the company should be able to provide the individual with concise, intelligible, easily accessible, free of charge and clearly written information about the processing.
What information do you need to provide?
- The name and contact details of our organisation.
- The name and contact details of our representative or data protection officer (if applicable).
- The purposes of the processing.
- The lawful basis for the processing.
- The categories of personal data obtained (if the personal data is not obtained directly from the individual).
- The recipients or categories of recipients of the personal data.
- The details of transfers of the personal data to any third countries or international organisations (if applicable).
- The retention periods for the personal data.
- The rights available to individuals in respect of the processing.
- The right to withdraw consent (if consent is used as a legal basis).
- The right to lodge a complaint with a supervisory authority.
- The source of the personal data (if the personal data is not obtained directly from the individual).
- The details of whether individuals are under a statutory or contractual obligation to provide the personal data (if applicable, and if the personal data is collected from the individual it relates to).
- The details of the existence of automated decision-making, including profiling (if applicable).