With the GDPR , software solutions and internal and external processes of software houses. Will also have to adapt to the new European regulation. Let’s analyze together various points of interest for the technology sector.
The official text states that a Register of. Treatments must be jamaica phone number library establishe in which the names and contact details of each data controller are entere. But it is recalle, pursuant to art. 30, paragraph 5, that the obligation of the .Register does not apply to software houses with less than 250 employees, unless so-calle risky. Treatments are carrie out or sensitive or criminal data is collecte.
The software house is always considered
Responsible for the processing in the case of providing the license to 5 strategies to motivate your call center employees use the software in on-premise mode. Furthermore, the GDPR provides that the subject who carries out the data processing activities on behalf of the owner, as in the case where the software is provide in cloud SaaS mode, is to be considere responsible for the processing.
And what about the figure of the DPO ? It is advisable to designate a data controller. The obligation to appoint a DPO is exclude for the provision of on-premise software , while it is necessary to procee with a more careful verification in cloud SaaS mode, because in this case sensitive data is managed such as employee sick leave, deductions from the paycheck to the chosen union, etc.
On the part concerning the Information and Consent
There is an obligation to make the request for consent distinguishable email leads database from other requests or declarations. The requirements of the information and consent remain identical to those provided by the legislation currently in force in Italy. The owner must demonstrate that he has acquired the data processing also through point and click methods.
And on the issue of personal data? When can a piece of data be said to be truly anonymous or anonymized? When identifying data and the aggregation of other personal data that make it impossible to trace the identity of the people to whom they refer are eliminated.
