* Value required to continue the assessment.
A - Company Name *
B - Email *
1 - Does the information notice contains who decides how the data subject’s personal data can be used and for which purposes?
2 - Does the information notice contains the identity and the contact details of the controller?
3 - If a DPO has been appointed, are its contact details provided in the information notice?
4 - Does the information notice contains how are the personal data processed, meaning for which purposes?
5 - Does the information notice contains which is the legal basis of the processing?
6 - If any processing is based on the legitimate interest of your organisation, does the information notice contains what does this legitimate interest involve?
7 - Does the information notice contains which personal data are processed? (i.e., name, contact details, official governmental documents, health data, etc.)
8 - Does the information notice contains with whom are the personal data shared, if any?
9 - Does the information notice contains if you intend to transfer the personal data outside the European Union? If yes, does it additionally include the appropriate safeguards on which the is transfer based?
10 - Does the information notice contains for how long are the personal data stored?
11 - Does the information notice contains the existence of automated decision-making used to make decisions based solely on automated processing (including profiling), which produces legal effects concerning the data subject or similarly significantly affects him / her?
11B - Does the information notice contains as a result of the automated decision-making, an explanation of the consequences for the data subject?
12 - Are the user data further processed for a purpose other than that for which they were obtained?
13 - Where the personal data is collected from third-parties, or in another way other than directly from the data subject - is the source of collection of the personal data specified?
14 - Does the information notice contains the existence of the right to request from the controller access to and rectification, or erasure of personal data, or restriction of processing concerning the data subject, or to object to processing, as well as the right to data portability and the right to withdraw consent, where applicable?
15 - Is the information notice concise, transparent, intelligible and easily accessible?
16 - Is the information notice written in clear and plain language?
17 - Is the information notice provided free of charge?