Analysis of personal data protection regulations (GDPR) – 2. Preliminary explanations

In order to understand the applicability of the new Regulation (EU) 2016/679 on the protection of individuals regarding the processing of personal data and the free movement of such data (GDPR), we will further define the terms used in it:

• “Personal data” means any information about an identified or identifiable physical person (“the data subject”); an identifiable physical person is a person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more many specific elements of his own physical, physiological, genetic, psychic, economic, cultural or social identity.
• “Processing” means any operation or set of operations performed on personal data or on personal data sets with or without the use of automated means such as collecting, recording, organizing, structuring, storing, adapting or modifying, extraction, consultation, use, disclosure by transmission, dissemination or making available in any way, alignment or combination, restriction, erasure or destruction
• “Consent” of the person in cause means any manifestation of free, specific, informed and unambiguous will of the person in cause by which he or she accepts, through a statement or unequivocal action, that the personal data concerning his / her can be processed.
• “Operator” means a individual or a legal entity, a public authority, an agency or other body which, alone or with others, establishes the purposes and means of processing personal data.

These are just a schematic and succinct presentation of the provisions of the new GDPR Regulation. For any questions or clarifications, please contact us by email at office@paulopol.ro.

How can we help you to implement GDPR correctly

We present you further on just a few examples of services you can get from the Paulopol Attorneys and Counselors Law Firm by outsourcing the Data Protection Officer (DPO), in order for you to implement GDPR correctly:

1. Specialized consulting on the protection of personal data.
2. Drafting or reviewing internal policies and data protection rules
3. Legal opinions on the measures to be taken in order to comply with the legal provisions.
4. Data protection audit based on the analysis of all operating regulations and internal policies.
5. Drawing up codes of conduct.
6. Database management consulting.
7. Drawing up the transfer policies of the databases.
8. Drafting and consulting on the implementation of policies on the protection of employees personal data,

These are just some of the services we can offer you related to GDPR. For details and legal assistance, please contact us by email at office@paulopol.ro.