Legal document

TABLE OF CONTENTS

Do I process personal data?
Who is affected by the GDPR?
What are the GDPR compliance obligations?

GDPR : Are you concerned? All you need to know

Find out if the GDPR affects you and what your obligations are in terms of personal data protection.

The General Data Protection Regulation (GDPR) is crucial European legislation that governs how companies handle and protect individuals’ personal data. But are you wondering if the GDPR is relevant to you? In this article, we’ll explore what the GDPR is and who it affects.

Do I process personal data?

Before going any further in understanding the GDPR, ask yourself this fundamental question: am I processing personal data? If your company collects, stores or processes data such as:

Personally identifying data:

  • First and last name
    Telephone number
  • Email address
  • Postal address
  • Identification numbers such as social security number, passport number, or driver’s license number

Financial and transactional data:

  • Banking information (such as account numbers)
  • Purchase and transaction history
  • Credit/debit card data

Employment data :

  • CVs
  • Cover letters
  • Performance evaluations
  • Salary and tax data

Location data :

  • GPS data
  • IP addresses
  • Other data indicating a person’s physical location

Health data :

  • Medical records
  • Health histories
  • Genetic or biometric information

Children’s data:

Any personal information relating to individuals under the age of 16 (or the age specified by the legislation of a Member State).

Online monitoring data :

  • Cookies and trackers
  • Browsing history
  • Data from social networks

Opinions and beliefs :

  • Political views
  • Religious or philosophical beliefs
  • Union membership

Electronic identification data :

  • Online identifiers
  • Pseudonyms
  • User profiles

Images and recordings :

  • Personal photos
  • Videos
  • Voice recordings

So the GDPR concerns you.

Who is affected by the GDPR?

The GDPR applies to any company or organization, regardless of size, that processes the personal data of European Union residents. Whether:

  • Companies and organizations: All companies and organizations, regardless of their size or nature, are affected by the GDPR if they process the personal data of European citizens. This includes, in particular, companies with 60 or more employees.
  • Controllers and processors: Data controllers are the entities that determine the purposes and means of processing personal data. Subcontractors, on the other hand, process data on behalf of the controller. Both are subject to the obligations of the GDPR, although their responsibilities differ.
  • Public authorities and bodies: public authorities, including government bodies, are also required to comply with the GDPR in their data processing activities.

What are the GDPR compliance obligations?

Under the GDPR, companies must comply with several obligations, including:

  1. Obtaining consent: Companies must obtain the explicit consent of individuals before collecting, processing or storing their personal data.
  2. Transparency: Companies must provide clear and transparent information on how they collect, use and protect personal data.
  3. Data security: Companies must implement appropriate security measures to protect personal data against loss, theft, unauthorized access and any other form of unlawful processing.
  4. Respect for individuals’ rights: Companies must ensure that individuals can exercise their rights, such as the right of access, the right of rectification, the right to erasure, the right to data portability and the right to object.

✅ In conclusion, the GDPR is an important regulation that affects any company processing the personal data of European Union residents. By complying with the GDPR’s obligations, businesses can boost their customers’ trust, avoid fines and penalties, and help create a safer, more privacy-friendly digital environment for all. Make sure you inform yourself about GDPR requirements and put in place the necessary measures to ensure your company’s compliance.

2nd DPO
in France

+20 new clients
per month

3 years
of existence

1.8M euros
raised in 2024

They trust us

Client Dipeeo - L'EXPRESS a été mis en conformité par Dipeeo qui est son DPO externe
RATP Dev d'insertion a été mis en conformité par Dipeeo qui est son DPO externe

01 59 06 81 85

contact@dipeeo.com

30 Rue du Sergent Bauchat
75012 Paris

Logo Dipeeo Blanc
Démonstration
Pour vous contacter, nous devons traiter vos données. Pour plus d’infos, consultez notre Politique de confidentialité.