Information to be provided to data subjects
Art. 13-14
-
Last updated
Mandatory
Catalog reference
When you collect personal data — whether directly from the person (Art. 13) or from another source (Art. 14) — tell them who you are, why you're processing their data, on what legal basis, how long you'll keep it, who it goes to, and what rights they have. Deliver this before or at the point of collection (Art. 13), or within a reasonable time when collected elsewhere (Art. 14).
Narrative — how we satisfy this requirement
The privacy statement on the company website and the staff privacy notice in the documentation wiki say who processes the data, why, and for how long.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due