GDPR basic [ENG]

Předchozí Lekce
Další Lekce

Processing for legal reasons

GDPR basic [ENG] Processing for legal reasons
  1. Legitimate interest of the controller – processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where those interests take precedence over the interests or fundamental rights and freedoms of the data subject requiring personal data protection, in particular if the data subject is a child. For example, the employer has a legitimate interest in processing the candidate’s CV or in a legitimate interest in operating a camera system.
  2. Fulfillment of a legal obligation (according to the law) – processing is necessary for the fulfillment of a legal obligation that applies to the administrator, eg registration of tax documents.
  3. Performance of the contract or negotiations on its conclusion – processing is necessary for the performance of the contract to which the data subject is a party or for the implementation of measures taken before the conclusion of the contract at the request of this data subject. E.g. data processing for the preparation of the contract with the customer or delivery of the ordered shipment.
  4. Consent to the processing of personal data – the data subject has given his consent to the processing of his personal data for one or more specific purposes. It may be the employee’s consent to the publication of a private telephone number to other employees. Apply the consent only to processing where another title cannot be applied and its provision must not condition the availability of the service or product, etc. CONSENT IS ALWAYS VOLUNTARY!
  5. Public interest – processing is necessary to fulfill a task performed in the public interest or in the exercise of public power entrusted to the administrator. For example, when a community uses camera footage in the streets to fight crime.
  6. Vital interest – processing is necessary to protect the vital interests of the data subject or another natural person. E.g. a severely injured unconscious patient who is unable to consent to the processing of their personal data for treatment.
Předchozí Lekce
Zpět na Kurz
Další Lekce