Personal data can be processed for various purposes, either based on legal grounds (accounting law, commercial code, etc.), with the consent of the data subject, or under legitimate interest. The legitimate interests of the data controller, including any third parties to whom the personal data may be disclosed, can serve as a legal basis for processing, provided that they do not outweigh the interests or fundamental rights and freedoms of the data subject. This consideration takes into account the reasonable expectations of the data subjects based on their relationship with the data controller (source: GDPR regulation).
For a company to utilize the processing of personal data based on legitimate interest, it must conduct a so-called balancing test to ensure that the legitimate interests of the company do not unduly affect the rights and freedoms of individuals. Additionally, the company must ensure proper transparency. It needs to inform the data subject about the processing, the collection of personal data, and the rights the data subject has.
Training name | Training duration | Venue | Price | The nearest date |
---|---|---|---|---|
Personal Data Protection Act in accordance with the EU Regulation - GDPR |
1 day
|
Company in-house training | On request |
According to you
|