The retention period for personal data is often set out […]
The controller must scan the situation in the organization, which […]
How long must the controller keep personal data?
The retention period for personal data is often set out in specific laws (eg, labor regulations determine the retention period for employee payslips). However, when the regulations do not establish a storage period, the principle of limiting the storage period given in Article 9 of the ZZLP is [...]
What is personal data?
Personal data is any information relating to an identified natural person or an identifiable natural person (personal data subject), while an identifiable natural person is a person whose identity can be determined, directly or indirectly. Personal data is a broad concept. Below are some examples: name and surname; [...]
What are the controller’s obligations arising from the ZZLP?
The controller must scan the situation in the organization, which includes mapping the movement of personal data (determines the categories of personal data that are processed, whether special categories of personal data are processed, as well as the legality, transparency and purposes of the processing of personal data [...]
