|
Post by juthi52943 on Jan 5, 2024 22:32:54 GMT -8
What should be understood as an essential part of the arrangements is not defined by the GDPR. The EDPB recommends that the substance should include at least all elements of information referred to in Art. and , and for each of these elements the arrangements should specify which of the joint data controllers is responsible for ensuring compliance with a specific element. The essence of the agreement must also be to indicate a contact Job Function Email List point, if one has been designated. The GDPR also does not specify how to make the essential part of the arrangements available to data subjects. Therefore, it is up to the joint controllers to decide on the most effective way to make the arrangements available. Together with the information contained in Article or of the GDPR, in the privacy policy or upon request to the Data Protection Officer, if any, or to the contact point - if one has been appointed . Article of the GDPR provides for the possibility for joint controllers to designate a contact point for data subjects, which, however, is not obligatory.
|
|