If I am not mistaken you need to add or specify on the "need for each of this processes" also: - the legal basis on which the data are processed. (Article 13, 1 c)) All the best Rainer Rodewald Lutz Donnerhacke schrieb am 21.05.2018 um 01:38:
My writeup on this issue. It's mostly FUD around, so some practical advice might help. https://lutz.donnerhacke.de/eng/Blog/The-practical-guide-to-GDRP
If you are interested, I'd recommend setting up a workspace in confluence. I'd actively help with questions.
For ICANN AtLarge (at least EURALO), we urgently need a list if data processing issues: - Membership handling - Mailinglists and archives - Travel arrangements - Meetings (recordings, transcriptions, attendence lists) - Telcos (es. call outs) - Wiki/Confluence
We need for each of this processes: - What data is collected? - Why is this data needed? - Who is responsible for this process? - How long is the data stored? - How can somebody request a change or deletion? - Where to complain?
Each of the entries can be very short, but we should have them. _______________________________________________ EURO-Discuss mailing list EURO-Discuss@atlarge-lists.icann.org https://atlarge-lists.icann.org/mailman/listinfo/euro-discuss
Homepage for the region: http://www.euralo.org