Large customers ask about your privacy. Do you have the answer ready?
Privacy only becomes urgent when a large customer sends a data processing agreement, or when there is a data breach. Navabi makes sure you are ready for it by then.
Privacy in order
Legal readiness · privacy and data
Next step
Two data processing agreements are missing: Mailchimp and Exact Online. The drafts are ready, 1 credit each.
View the draftsIn order, and able to prove it.
Privacy is an accountability obligation: you have to be able to show it.
The basics
A privacy statement that matches what you do, a record of processing activities and data processing agreements with all your suppliers.
- Based on your actual suppliers
- Kept up to date when you start using something new
Your suppliers
When it goes wrong
A data breach sometimes has to be reported to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours. With a protocol you know what to do.
- Data breach protocol
- Assessment of whether reporting is required
- Breach discoveredMon 10:15
- AssessmentDoes it need to be reported?
- Report to the APWithin 72 hours
- Inform data subjectsIf the risk is high
The points that go wrong in practice.
Data processing agreements
With every supplier that processes personal data for you.
Legal basis
Why you are allowed to process something, per purpose.
Retention periods
How long you may keep data, and that you delete it afterwards.
Data breaches
When you have to report, and within how much time.
DPIA
Mandatory for high-risk processing.
AI and customer data
Whether you may use customer data for your own AI.
A fixed price per item.
In credits, within your plan or separately. Full price list
Drafting or checking a data processing agreement
Fixed price, however long it takes us.
Privacy statement
Fixed price, however long it takes us.
Short answers.
A customer sends their own data processing agreement. What now?
Forward it. You get it back with what you can and cannot accept. Cost: 1 credit.
Read more
See the article on the data processing agreement.