Privacy
GDPR, the General Data Protection Regulation, is a comprehensive set of rules designed to protect the personal data of individuals within the European Union. It mandates how organizations handle personal information, emphasizing transparency, security, and individual rights.
Personal Data:
Any information relating to an identified or identifiable natural person. This includes not only obvious identifiers like names and addresses but also things like email addresses, phone numbers, location data, and even online identifiers like cookie IDs.
Data Processing:
Any operation performed on personal data, including collection, storage, use, and deletion.
Data Subject:
The individual whose personal data is being processed. In most cases, this will be a customer, user, or employee.
Data Controller:
The organization that determines the purpose and means of processing personal data. This is typically the company or entity that collects the data.
Data Processor:
A third-party organization that processes personal data on behalf of a data controller. This could be a cloud provider, a marketing agency, or a payroll service.