Map of Europe

Version 0.8.2 (August 2018)

General Data Protection Regulation

Privacy Notice Generator

"The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14... in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child." - Article 12

European Union flag

GDPR Notice
Generator

Testing XML here . Go away

Privacy Notice Code

Copy this code into an html document.

You will also need to download the following Javascript and CSS files:
translate.js
jquery-3.1.1.min.js
jquery-ui.min..js
notice.css
and place them in the js/ and css/ directories, respectively.

CONTROLLER

Article 13 (1)(a) & (b) Identity and Contact Details and Article 14 (1)(a) & (b)

Controller
Representative in the EU

See Article 27 for obligations to appoint a representative.

Data Protection Officer

See Article 37 for obligations to appoint a data protection officer.

Why

Article 13 (1)(c) Purpose and Article 14 (1)(c)

What is the purpose for processing this personal data?





Add additional other purpose field

Basis

Article 13 (1)(c) & (d) Legal Basis and Article 14 (1)(c) and (2)(b)

What is your legal basis [Article 6(1)] for processing this personal data?




Add additional other purpose field

Share

Article 13 (1)(e) & (f) Sharing of personal data and Article 14 (1)(e) & (f)

Who will personal data be shared with?

Add recipient of personal data

Select all countries, deemed adequate (under Article 45), to which personal data will be transferred











For countries not deemed adequate, select all safeguards under which personal data will be transferred




How may the data subject obtain a copy of the above safeguards?
Transfers under Article 49 subparagraph 2
Where a transfer could not be based on a provision in Article 45 or 46, including the provisions on binding corporate rules, and none of the derogations for a specific situation referred to in the first subparagraph of this paragraph is applicable, a transfer to a third country or an international organisation may take place only if the transfer is not repetitive, concerns only a limited number of data subjects, is necessary for the purposes of compelling legitimate interests pursued by the controller which are not overridden by the interests or rights and freedoms of the data subject, and the controller has assessed all the circumstances surrounding the data transfer and has on the basis of that assessment provided suitable safeguards with regard to the protection of personal data. The controller shall inform the supervisory authority of the transfer. The controller shall, in addition to providing the information referred to in Articles 13 and 14, inform the data subject of the transfer and on the compelling legitimate interests pursued.
Add additional other purpose field

Keep

Article 13 (2)(a) Retention and Article 14 (2)(a)

Storage

Rights

Article 13 (2)(b) Access and Article 14 (2)(c)

Inform the data subject of the right to request access, rectification or objection and the right to data portability

Article 13 (2)(c) Consent and Article 14 (2)(d)

Inform the data subject of right to withdraw consent

Article 13 (2)(d) Complaints and Article 14 (2)(e)

Inform the data subject of the right to lodge a complaint

Required

Article 13 (2)(e) Required


Why is personal data required?


Decisions

Article 13 (2)(f) Automated Decision Making and Article 14 (2)(g)


Describe the automated decision making

Sources

Article 14 (2)(f) Sources of Personal Data


Article 14 concerns personal data not obtained from the data subject. Article 29 Working Party's Guidelines on the right to "data portability" has some potentially related guidance on this.
Select all sources of personal data












Add additional source

Types

Article 14 (1)(d) Categories of Personal Data

What categories of personal data are collected?

Internal




External








Financial





Social







Tracking




Historical


Settings

When you've completed the form, you can condense the notice to show how it will be displayed for the user.

Choose a default language
Choose CDN or Local files

to learn more.

      Your data is shared with:

        Your data is not shared by us with others.


        Some of your data may be sent outside the European Union and European Economic Area or to an international organization.

        Your data may be sent outside the European Union and European Economic Area in compliance with Article 49(1) paragraph 2 of the General Data Protection Regulation. Sharing your data, in this case, is needed to:

          You have the right to complain to an authority.

          Schools Schools

          EmployersEmployers

          FriendsFriends

          Electronic DevicesElectronic
          Devices

          Health Care ProvidersHealthcare Providers

          Insurance CompaniesInsurance
          Companies

          Financial InstitutionsFinancial
          Institutions

          Social NetworksSocial
          Networks

          Government RecordsGovernment
          Records

          Data BrokersData
          Brokers

          The Public InternetThe Public
          Internet

          Monitoring EquipmentMonitoring
          Equipment