{"id":5001,"date":"2017-11-13T08:55:24","date_gmt":"2017-11-13T07:55:24","guid":{"rendered":"https:\/\/www.sec4you.com\/?p=5001"},"modified":"2022-11-06T09:58:15","modified_gmt":"2022-11-06T08:58:15","slug":"gleanings-gdpr-workshop-the-directory-of-processing-activities-with-template","status":"publish","type":"post","link":"https:\/\/www.sec4you.com\/en\/gleanings-gdpr-workshop-the-directory-of-processing-activities-with-template\/","title":{"rendered":"Glea\u00adnings: GDPR<\/span> Work\u00adshop \u2014 The Direc\u00adto\u00adry of Pro\u00adces\u00adsing Acti\u00advi\u00adties with Template"},"content":{"rendered":"

Due to the gre\u00adat demand of our cus\u00adto\u00admers and inte\u00adres\u00adted par\u00adties on the topic of GDPR<\/span> and Direc\u00adto\u00adry of Pro\u00adce\u00addu\u00adres, SEC4YOU<\/span> offe\u00adred a GDPR<\/span> work\u00adshop in Novem\u00adber 2017, which spe\u00adci\u00adfi\u00adcal\u00adly high\u00adlights the imple\u00admen\u00adta\u00adti\u00adon of GDPR<\/span> mea\u00adsu\u00adres and offers affec\u00adted com\u00adpa\u00adnies the oppor\u00adtu\u00adni\u00adty to start direct\u00adly at the work\u00adshop with the mea\u00adsu\u00adres or to sup\u00adport their own pro\u00adject with tem\u00adpla\u00adtes and decis\u00adi\u00adon bases.<\/p>\n

The work\u00adshop was aimed at public and pri\u00adva\u00adte com\u00adpa\u00adnies from all sec\u00adtors that pro\u00adcess or store per\u00adso\u00adnal data. Con\u00adtra\u00adry to the wide\u00adspread opi\u00adni\u00adon that the GDPR<\/span> only appli\u00ades to lar\u00adge com\u00adpa\u00adnies, this ques\u00adti\u00adon was ans\u00adwe\u00adred con\u00adclu\u00adsi\u00adve\u00adly by work\u00adshop lea\u00adder Man\u00adfred Scholz as well as by two lawy\u00aders present:<\/p>\n

The GDPR<\/span> affects all com\u00adpa\u00adnies that pro\u00adcess per\u00adso\u00adnal data \u2014 regard\u00adless of com\u00adpa\u00adny size and legal form \u2014 as of 25.5.2018!<\/p>\n

After explai\u00adning the histo\u00adry of the GDPR<\/span> and the posi\u00adti\u00adon of Aus\u00adtria in the Euro\u00adpean vote, the par\u00adti\u00adci\u00adpan\u00adts agreed on the essen\u00adti\u00adal com\u00adpon\u00adents of the GDPR<\/span> imple\u00admen\u00adta\u00adti\u00adon. As an important task within the GDPR<\/span> mea\u00adsu\u00adres, the new requi\u00adre\u00adment of kee\u00adping a regis\u00adter of pro\u00adces\u00adsing acti\u00advi\u00adties in Aus\u00adtria was discussed.<\/p>\n

Direc\u00adto\u00adry of pro\u00adces\u00adsing acti\u00advi\u00adties by means of software?<\/strong><\/p>\n

Con\u00adtra\u00adry to the opi\u00adni\u00adon of indi\u00advi\u00addu\u00adal pro\u00advi\u00adders, a soft\u00adware tool for main\u00adtai\u00adning the direc\u00adto\u00adry of pro\u00adces\u00adsing acti\u00advi\u00adties should not be in the fore\u00adground of a GDPR<\/span> pro\u00adject, as the initi\u00adal crea\u00adti\u00adon can usual\u00adly be done in Excel or Word for small and medi\u00adum-sized com\u00adpa\u00adnies. In lar\u00adge com\u00adpa\u00adnies, or if the main\u00adten\u00adan\u00adce effort for kee\u00adping and regu\u00adlar\u00adly che\u00adcking or revi\u00adsing the direc\u00adto\u00adry is to be done by seve\u00adral employees or in dis\u00adtri\u00adbu\u00adted com\u00adpa\u00adnies, the intro\u00adduc\u00adtion of a spe\u00adcial tool can also save costs.<\/p>\n

The Direc\u00adto\u00adry of Pro\u00adces\u00adsing Acti\u00advi\u00adties \u2014 DSGVO<\/span> VV<\/span><\/strong><\/p>\n

As has been cus\u00adto\u00adma\u00adry in Ger\u00adman data pro\u00adtec\u00adtion for over 10 years as a \u201cpro\u00adce\u00addu\u00adral direc\u00adto\u00adry\u201d or \u201cpro\u00adce\u00addu\u00adral over\u00adview\u201d, the GDPR<\/span> now also requi\u00adres com\u00adpa\u00adnies to main\u00adtain a direc\u00adto\u00adry of pro\u00adces\u00adsing acti\u00advi\u00adties. Experts see a dif\u00adfe\u00adrence here to the DSG<\/span> 2000 whe\u00adre in Aus\u00adtria a basic obli\u00adga\u00adti\u00adon to report cer\u00adtain data appli\u00adca\u00adti\u00adons in the data pro\u00adtec\u00adtion regis\u00adter is requi\u00adred (until May 2018) or was requi\u00adred (from May 2018).<\/p>\n

An important fea\u00adture of a pro\u00adce\u00addu\u00adre direc\u00adto\u00adry is that the data-pro\u00adces\u00adsing com\u00adpa\u00adny pro\u00adces\u00adses are recor\u00added and not the appli\u00adca\u00adti\u00adons themselves.<\/p>\n

=> What the\u00adr\u00ade\u00adfo\u00adre does not belong in a direc\u00adto\u00adry of pro\u00adces\u00adsing acti\u00advi\u00adties? e.g. MS<\/span> CRM<\/span>, Excel or Exchange.<\/p>\n

The important con\u00adtents of the direc\u00adto\u00adry of pro\u00adces\u00adsing acti\u00advi\u00adties have been summarized.<\/p>\n

In the role of the con\u00adtrol\u00adler must be recorded:<\/p>\n