For companies in Como, Brianza and Milan the list usually includes more sources than you might think. Knowing them is the first step towards describing them correctly in the privacy notice. The content is for information only and does not replace the opinion of your legal advisor.
This is where we start when we analyse a website.
From our studio in Cantù we start from how the website really works: which forms and tools there are, where the data ends up and who it is shared with, including towards ERP, CRM and PIM. The privacy notice is prepared on this basis. For your specific case, check with your legal advisor or DPO: we work together with them on the technical side.
The record of processing activities is an internal document describing what personal data a company processes, for what purposes and with which tools. For companies in Como and Milan the website is one of the items to consider. Whether and how to keep it is assessed by your legal advisor or DPO.
The data processor is the external party that processes data on the company's behalf, for example a hosting or newsletter provider. For company websites between Como and Milan we list the active services; when an appointment is needed is assessed by your legal advisor or DPO.
The DPO is the advisory and oversight role for privacy; whether one must be appointed depends on factors such as the type of organisation and the nature of the processing. For a company in Como or Brianza the assessment is up to the legal advisor: from Cantù, we only handle the technical side of the website.
The GDPR requires security measures appropriate to the risk, proportionate to the data processed and the tools used. For a company website in Cantù or Brianza this means hosting, connection, access, updates and backups; what is appropriate in your case is assessed by your legal advisor or DPO.
The rights of users over personal data recognised by the GDPR and the nLPD/nFADP include access, rectification, erasure, portability, objection and withdrawal of consent, with limits and conditions that vary. For a website in Como or Milan, which apply in your case is assessed by your legal advisor or DPO.
