The record of processing activities in brief
The record of processing activities is an internal document in which a company describes in an orderly way what personal data it processes, for what purposes and with which tools. It helps keep data flows under control. For companies in Como and Brianza, the website is one of the items to consider. Whether your company must keep one and how to fill it in is assessed by your legal advisor or DPO.
Want technical support to map your website's tools?
For your specific case, check with your legal advisor or DPO: we work together with them on the technical side of the website.
The data processor is the external party that processes data on the company's behalf, for example a hosting or newsletter provider. For company websites between Como and Milan we list the active services; when an appointment is needed is assessed by your legal advisor or DPO.
The DPO is the advisory and oversight role for privacy; whether one must be appointed depends on factors such as the type of organisation and the nature of the processing. For a company in Como or Brianza the assessment is up to the legal advisor: from Cantù, we only handle the technical side of the website.
Privacy by design means designing the website with data protection in mind from the start; privacy by default means that default settings collect only the necessary data. For the websites of companies in Cantù and Brianza this translates into essential forms and scripts that run only with consent.
The rights of users over personal data recognised by the GDPR and the nLPD/nFADP include access, rectification, erasure, portability, objection and withdrawal of consent, with limits and conditions that vary. For a website in Como or Milan, which apply in your case is assessed by your legal advisor or DPO.
Accountability under the GDPR is the principle of responsibility: whoever processes personal data must be able to demonstrate how they handle it. For a company website in Como or Brianza it means documenting tools, consents and choices. How to apply it in your case is for you to assess with your legal advisor or DPO.