The puzzle called AVG

Written by:
Leo Hoogma, 25 November 2020

Since 2018, the European privacy law AVG applies to entrepreneurs. This means that you as an entrepreneur must be accountable for the processing of personal data. This law applies to all organizations within the EU that process personal data, including SMEs and freelancers.

Are you GDPR proof?

Accountability
The General Data Protection Regulation (GDPR) forces organizations to demonstrate that they comply with privacy rules. As an entrepreneur, you have a so-called duty of accountability. This means that you must be able to demonstrate, and therefore have documented, that your processing operations comply with the rules of the GDPR.

For example, you must be able to demonstrate that you process personal data according to the most important principles of processing, such as:

• Legality. You do not store data that is not necessary, but only the data that is essential for the performance of your work.
• Transparency. How and why do you store data, and how is this data secured? You must be able to show this at the request of the Dutch Data Protection Authority, as well as at the request of your customers.
• Purpose limitation. You may only process data that is necessary to achieve the goal: performing your work.
• Correctness. You must store correct information that is accessible on request. In addition, you must keep a register of what has been changed to prevent errors.

You must also be able to demonstrate that you have taken the correct security measures to protect the personal data. Data may not be kept longer than necessary in the GDPR.

Processor agreement

You are obliged to account for your data processing when the Dutch Data Protection Authority requests this. Therefore, make sure that you meet your accountability obligations. Sign a processor agreement with your customers in which you determine what personal data may be processed for, which security measures have been taken for the safe storage of this data, and whether the processor may engage sub-processors for the processing.

Puzzle?
Hoogma Webdesign is happy to help you solve the puzzle called AVG. As a hosting company we arrange the traffic of your website, as well as the e-mail traffic. We not only 'see` your data, but also that of your customers. We are therefore an important pivot in the privacy guarantee of your company. We handle this with care and that is why we map everything transparently, so that we fully comply with the requirements of this privacy law.

Do you have any questions or do you want to know how Hoogma Webdesign handles your data? Then contact us. You can find more information about the GDPR on the website of the Dutch Data Protection Authority, such as `GDPR in a nutshell`.

Would you like to read more blog posts? Go to the page Blog.