GDPR: 4 rules to know for a compliant website

[nusaibatara]

The GDPR governs the collection and processing of personal data of Internet users in the European Union.

This personal data is any information that can be used to identify a person . This could be an identifier, a name, a number or a geolocation, for example.

The GDPR requires companies to request consent from data owners before collecting and using their data for marketing purposes. This applies to information collected through a contact form, a customer review, or the creation of an account on your website.

The GDPR also applies to cookies . These are small files stored on your browser, associated with a domain name. They are used, for example, to:

Remember a customer ID,
Save the contents of a shopping cart on an e-commerce site,
Track an Internet user's browsing in order to produce statistics, etc.
Your obligations under the GDPR
As the website's editorial manager, you are subject to certain obligations to ensure compliance with the GDPR.

In particular, you must:

Ensure that the Internet user's consent is informed, unequivocal and explicit ;
Secure Internet user data : you guatemala phone number data ensure the integrity and protection of the data collected, while minimizing the risks in the event of loss (in the event of hacking, for example);
Keep a data register : this allows you to prove that you have obtained the consent of Internet users, and when (the CNIL provides an example here );
Guarantee the right to withdraw : an Internet user can request at any time to no longer share and use their personal data, even if they have previously given their consent.
Inform Internet users : they must know what data you collect, as well as when and how, what you do with it (processing, storage) and whether third parties have access to it.
This last point is important. You must inform Internet users if their data is transmitted to partners or subcontractors. They are also subject to data protection regulations.

Finally, despite all your precautions, you may still be the victim of a malicious act. Zero risk does not exist. It is precisely because of the proliferation of online services and the fraudulent use of data that the GDPR was introduced. Therefore, in the event of a data breach , it is imperative to report it to the CNIL, directly on their website.