GDPR - Privacy Notices

What privacy information should we provide to data subjects?

The table below summarises the information that you must provide. What you need to tell people differs slightly depending on whether you collect personal data from the data subject it relates to or obtain it from another source.

What information do we need to provide?

Personal data collected from data subjects

Personal data obtained from other sources

The name and contact details of your organisation

The name and contact details of your representative

The contact details of your data protection officer if you have one

The purposes of the processing

The lawful basis for the processing

The legitimate interests for the processing if you are relying on this

The categories of personal data obtained

 

The recipients or categories of recipients of the personal data

The details of transfers of the personal data to any third countries or international organisations (outside the EEA)

The retention periods for the personal data

The rights available to data subjects in respect of the processing

The right to withdraw consent (if consent is being relied on as a legal basis)

The right to lodge a complaint with a supervisory authority

The source of the personal data (ie if it was not obtained from the data subject whether it was obtained from public sources)

 

The details of whether data subjects are under a statutory or contractual obligation to provide the personal data

The details of the existence of automated decision-making, including profiling