Spotlight on other case studies

Guidelines on cookies and other tracking methods

Management of cookies according to the Guidelines of the Guarantor Authority for the protection of personal data issued on 10 June 2021

GRS certification in the fashion sector

adaptation of the processes for obtaining the GRS certification for the recycled product lines

Enhancement of production waste

Regeneration of printed polyester films through a patented process

The Data Processor pursuant to art. 28 Gdpr

Industry: Electronics & High Tech
Service: GDPR

Management and verification of the Data Processor

Need

The company is a software house in Carpi, specialized in IT services. It requested the support of Service Line Digital e Innovation Warrant Hub S.p.A. to verify compliance with the Gdpr of suppliers (the so-called "Data Processors", or those subjects who, pursuant to art. 28 of the GDPR, process personal data on behalf of the Data Controller).

Solution

Using the Privacy Lab platform, we surveyed, one by one, all the data processors by sending each a verification questionnaire. Once returned to us, the PrivacyLab platform reported to us, based on the answers given, which suppliers were compliant with the GDPR and which were not.

Art. 28 of the GDPR asks the Data Controller to only resort to data processors who present sufficient guarantees to implement adequate technical and organizational measures so that the processing meets the requirements of the Regulation and guarantees the protection of the rights of the data subject.

Once all the checks have been completed, we then produced and sent the Appointment as Data Processor to each of the suppliers surveyed.

Benefits

  • Census of all data processors
  • Evidence of the verification phase of the Data Processor.
  • Production of the document of Appointment as Data Processor of the registered supplier.
  • Greater protection for the company, as the documentation created by the PrivacyLab certified consultant is secured and guaranteed against any formal error in the event of control by the Authority.

Put us to the test

Tell us about your business’s objectives, we will suggest solutions tailored to your needs