What is GDPR compliance?
• Purpose: Data is collected for a specific purpose and is not subsequently used for a different purpose. The data's purpose governs the use and reuse of your data.
• Data Minimization: Only data strictly necessary for achieving the intended objective should be collected. The aim is to minimize data collection as much as possible. Data collection only concerns specific data within the scope of the pursued objective.
• Storage Limitation: Data should only be retained in an identifiable form and in an 'active database' for the period necessary to achieve the intended objective. Subsequently, it must be destroyed, anonymized, or archived in compliance with applicable legal obligations concerning the retention of public records.
• Security: The data controller must implement all appropriate measures to ensure the integrity and confidentiality of this data, particularly by ensuring that unauthorized third parties do not have access. These measures will be determined based on assessed risks and will encompass physical, logical, technical, and organizational aspects.
• Data Subject Rights: Individuals whose data is processed must retain control over their personal data. Everyone possesses data protection rights, which can be exercised with the entity holding this information:
• the right to access their data and obtain a copy
• the right to rectify it
• the right to object to its use, unless the processing fulfills a legal obligation (for example, an individual cannot object to being included in a civil status register).
