A " personal data » is “any information relating to an identified or identifiable natural person”.
A person can be identified:
- directly (example: last name, first name)
- or indirectly (example: by an identifier (customer number), a (telephone) number, a biometric data, several specific elements specific to one's physical, physiological, genetic, psychological, economic, cultural or social identity, but also voice or image).
A treatment of data must have an objective, a purpose, i.e. you cannot collect or process personal data just in case it comes in handy one day. Each data processing must be assigned a purpose, which must obviously be legal and legitimate with regard to your professional activity.
As a GDPR lawyer, Maître Zakine supports you in all stages of bringing your company into compliance with the GDPR. She advises you on the obligations incumbent on you as data controller and assists you in drafting the documents.
Read also on Me Zakine's website : When the protection of privacy and personal data becomes a matter for the European Union
You can also consult : Maître Zakine Lawyer RGPD - Personal Data