* Value required to continue the assessment.
A - Company Name *
B - Email *
1 - Does the information notice specify who decides how the data subject’s personal data can be used and for which purposes?
2 - Does the information notice indicate the identity and the contact details of the controller?
3 - Does the information notice provide the contact details of the DPO, if one has been appointed,?
4 - Does the information notice explain how the personal data are processed, meaning for which purposes?
5 - Does the information notice include the legal basis of the processing?
6 - If any processing is based on the legitimate interest of your organisation, does the information notice explain what this legitimate interest involve?
7 - Does the information notice indicate which personal data are processed? (i.e., name, contact details, official governmental documents, health data, etc.)
8 - Does the information notice indicate with whom are the personal data are shared, if any?
9 - Does the information indicate if your organisation intends to transfer the personal data outside the European Economic Area? If you do transfer personal data, does it additionally include the appropriate transfer tools and safeguards on which the is transfer based?
10 - Does the information notice indicate for how long the personal data are stored?
11 - Does the information notice explain the existence of automated decision-making used to make decisions based solely on automated processing (including profiling), which produces legal effects concerning the data subject or similarly significantly affects him / her?
11B - Does the information notice contain an explanation of the consequences for the data subject, as a result of the automated decision-making?
12 - Does the information notice explain whether the data are further processed for a purpose other than that for which they were obtained?
13 - If the personal data is collected from third-parties, or in another way other than directly from the data subject - is the source of collection of the personal data specified in the information notice?
14 - Does the information notice mention the existence of the right to request from the controller access to and rectification, or erasure of personal data, or restriction of processing concerning the data subject, or to object to processing, as well as the right to data portability and the right to withdraw consent, where applicable?
15 - Is the information notice concise, transparent, intelligible and easily accessible?
16 - Is the information notice written in clear and plain language?
17 - Is the information notice provided free of charge?