DSGVO right - you need to pay attention to as a small business owner
Basically, the DSGVO regulates the processing of personal data and, thus, affects almost every company without exception. As soon as you can, for example, use customer data for billing or a Newsletter to send, you must comply with the provisions of the data protection regulation.
- First of all, you should get an Overview of where in the company is personal data collected, stored and processed. All of these processes are necessary for the implementation of the DSGVO relevant.
- In the implementation of the DSGVO you should keep to the principle of "Privacy by Design". The hot that you need to make the processes of data collection so that only the most necessary data are collected. If you want to reach your customers, for example, by E-Mail, you should not store the phone number.
- There is the distinction of sensitive and non-sensitive personal data. Sensitive data, for example, medical data, political opinions, ethnic origin, religious Beliefs or sexual orientation would be. Social security numbers fall into this category and must therefore be especially protected. You will also need a consent of the persons concerned, to be allowed to this data store.
- As a General rule: Save only data that are really necessary. In addition, there must be a reason why you keep this data. You will also need the explicit consent of all persons concerned.
- As an entrepreneur, you are responsible for the security of the stored data. Thus, you need to make sure that this can not be stolen or in the hands of strangers reach. If you are transferring data over the Internet, it must be encrypted. You should also let customer data from external enterprise storage or processing, you need to ensure that these so-called upstanding data processor to act also in accordance with the DSGVO. Therefore, you should with your contractors to a contract, the guaranteed the.
- Make sure that you can delete this data by the deadline or at the request of the Person concerned. It is also important that the data from existing Backups will disappear.
Implementation of the DSGVO (source: Pixabay)
In the next practical tip learn, what website operators in the implementation of the DSGVO need to consider.
