Direct answer · GDPR
Information to provide when collecting data
Whoever collects data from the data subject provides, at that moment (Article 13(1) and (2)): the identity and contact details of the controller and of the data protection officer; the purposes and the legal basis; the legitimate interest where that is the legal basis; the recipients; an intended transfer outside the EEA with the safeguards; the storage period or the criteria for it; the rights of data subjects, including withdrawing consent; the right to lodge a complaint with the supervisory authority; whether providing the data is mandatory and what happens if someone does not; and the existence of automated decision-making with meaningful information about the logic involved. If the data do not come from the data subject, Article 14 applies, including the source of the data.
For you to establish
- Do the data come from the data subject or from another source?
Articles
- Art. 13(1) and (2) GDPR Information where data are collected from the data subject.
- Art. 14(1), (2) and (3) GDPR Information where the data come from elsewhere.
- Art. 12(1) GDPR Concise, transparent, intelligible and in clear and plain language.
Guidelines and decisions
- Guidelines on transparency under Regulation 2016/679 (Article 29 Working Party, WP260 rev.01, 2018-04-11)Guidelines on transparency.
