Category Archives: Privacy & identity

The Information and the rights of the data subject

quando non si applica il gdpr

A fundamental condition for a lawful processing is that the data subject receives an adequate Information on the processing before giving the consent or during the collection if the consent is not necessary. The Information should include the following indications: –       Data subject’s identity; –       Purposes of the processing; –       Judicial base of the processing; […]

Who is the controller of the data processing

quando non si applica il gdpr

  The controller is the one who determines the purposes and the means of the processing. In case of a company, the controller is the company itself and not the person representing it or charged to manage privacy. The controller may appoint one or more external processors to whom assign some particular activities (computer maintenance, […]

What data processing is

quando non si applica il gdpr

Any operation involving personal data, also including  their access or vision, is considered as data processing. Even the usage of a video surveillance system or a drone taking images of people, even without filming, is considered as data processing. The data processing should be lawful, fair and transparent. The information about the data processing has […]

What personal data are

quando non si applica il gdpr

Personal data is “any information concerning an identified or identifiable natural person” that in the Regulation is called “data subject” of the processing. The Regulation deals only with data interesting natural persons and not legal ones. “Personal data” is a very wide concept and concerns any information somehow linked to a natural person – which […]