The privacy policy/notice/statement provides individuals with information on how you process personal data. In doing so, the information should be written in a clear, concise, transparent, understandable and easily accessible manner, and using simple language.
In the Policy/Notice/Privacy Statement you should inform natural persons about:
- the purposes of the processing,
- the legal basis for the processing,
- the storage period,
- whether personal data is shared with other legal and natural persons,
- legitimate interest,
- the intention to transfer personal data to third countries or international organizations,
- the contact details of the personal data protection officer, etc.
Example:
Maria is a hairdresser. She doesn’t have a website, but has posted a notice in the salon saying customers can request a copy of her privacy statement.
Company HH DOOEL works in graphic design. It has its own website on which, in a visible place, the privacy statement is published.
Both controllers have a privacy statement that consists of all the elements prescribed by the Law on Personal Data Protection (Article 16, 17, and 18).
