{"id":389,"date":"2019-08-22T07:17:05","date_gmt":"2019-08-22T07:17:05","guid":{"rendered":"http:\/\/www.dataprotectionconsultant.it\/EN\/?p=389"},"modified":"2020-05-25T08:33:53","modified_gmt":"2020-05-25T08:33:53","slug":"faq-obligations-of-information-to-the-data-subject","status":"publish","type":"post","link":"https:\/\/www.dataprotectionconsultant.it\/EN\/faq-obligations-of-information-to-the-data-subject\/","title":{"rendered":"Faq &#8211; Obligations of information to the data subject"},"content":{"rendered":"<p><a href=\"http:\/\/www.dataprotectionconsultant.it\/faq-obblighi-di-informazione-allinteressato\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-43\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente.jpg 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-100x100.jpg 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-italia-trasparente-150x150.jpg 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a><a href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/faq-obligations-of-information-to-the-data-subject\/\"><img decoding=\"async\" loading=\"lazy\" class=\"alignright wp-image-44\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente.png 225w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-100x100.png 100w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/flag-uk-trasparente-150x150.png 150w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"size-medium wp-image-49 aligncenter\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-300x136.jpg\" alt=\"\" width=\"300\" height=\"136\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-300x136.jpg 300w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq-600x272.jpg 600w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faq.jpg 617w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p style=\"text-align: center;\"><span style=\"font-size: 18pt; color: #ff0000;\"><strong>Obligations of information to the data subject<\/strong><\/span><\/p>\n<p style=\"text-align: center;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><span style=\"font-size: 14pt; color: #ff0000;\"><strong>What information should be provided in a small-sized form where it is not possible to list all the elements required by the GDPR? And what if data are collected by phone?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong><span style=\"font-size: 12pt;\">Essential information to describe the context of data processing. Therefore, at least identity and contacts of the controller, purposes of processing and whether the data subject is obliged to provide data, whether data may be communicated or disseminated \u2013 where applicable \u2013 (also in the event of transfer to third countries), if there is a process of profiling, the DPO\u2019s contacts (where applicable) and the rights which the data subject can exercise, including the right to lodge a complaint with the supervisory authority. The data subject should be redirect to a website \u2013 or other easily accessible instrument \u2013 to get full information.<\/span> These considerations are valid also in the event of data collection by phone.<\/strong><\/span><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/p>\n<hr \/>\n<p style=\"text-align: center;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><span style=\"color: #ff0000; font-size: 14pt;\"><strong>When data are only stored, shall the controller provide information?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>The controller is obliged to provide information, because also data storage is a processing activity, so the obligation shall be complied with.<\/strong><\/span><span style=\"font-family: 'Comic Sans MS', sans-serif; color: #0000ff;\"><strong><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/strong><\/span><\/p>\n<hr \/>\n<p style=\"text-align: center;\"><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-370\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg\" alt=\"\" width=\"50\" height=\"50\" srcset=\"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2.jpg 150w, https:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-dubbiosa-2-100x100.jpg 100w\" sizes=\"(max-width: 50px) 100vw, 50px\" \/><span style=\"color: #ff0000; font-size: 14pt;\"><strong>Is it possible to use the same information statement for all data collection activities?<\/strong><\/span><\/p>\n<p style=\"text-align: justify;\"><span style=\"color: #000000;\"><strong>It is not possible, because each processing activity has its own context: for instance, the purposes of processing and the legal bases for processing, data which are collected, the period of storage, the recipients of data are different.<\/strong><\/span><span style=\"font-family: 'Comic Sans MS', sans-serif; color: #0000ff;\"><strong><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-45\" src=\"http:\/\/www.dataprotectionconsultant.it\/EN\/wp-content\/uploads\/2019\/08\/faccina-ok-trasparente.jpg\" alt=\"\" width=\"60\" height=\"50\" \/><\/strong><\/span><\/p>\n<hr \/>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #000000;\"><strong>To learn more, click <span style=\"text-decoration: underline;\"><a style=\"color: #000000; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/obligations-of-information-to-data-subject\/\"><span style=\"color: #0000ff; text-decoration: underline;\">here<\/span><\/a><\/span> or <span style=\"text-decoration: underline; color: #0000ff;\"><a style=\"color: #0000ff; text-decoration: underline;\" href=\"http:\/\/www.dataprotectionconsultant.it\/EN\/contacts\/\">contact me<\/a><\/span>.<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; &nbsp; Obligations of information to the data subject What information should be provided in a small-sized form where it is not possible to list all the elements required by the GDPR? And what if data are collected by phone? Essential information to describe the context of data processing. Therefore, at least identity and contacts &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.dataprotectionconsultant.it\/EN\/faq-obligations-of-information-to-the-data-subject\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Faq &#8211; Obligations of information to the data subject&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/389"}],"collection":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/comments?post=389"}],"version-history":[{"count":8,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/389\/revisions"}],"predecessor-version":[{"id":1159,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/posts\/389\/revisions\/1159"}],"wp:attachment":[{"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/media?parent=389"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/categories?post=389"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataprotectionconsultant.it\/EN\/wp-json\/wp\/v2\/tags?post=389"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}