[NA-Discuss] Question about GDRP

Mon Apr 30 15:12:48 UTC 2018

Hi Eduardo,

the reference is not inaccurate, but misleading as it leaves out an 
important qualification. While certain companies may be excempt, this 
does not apply in cases where “the processing it carries out is likely 
to result in a risk to the rights and freedoms of data subjects, the 
processing is not occasional, or the processing includes special 
categories of data […] or personal data relating to criminal convictions 
and offences”.

The part about the occasional procession would exclude most online 
services and businesses, where such processing forms the basis of the 
ability to perform the service.

Best,

Volker

Am 30.04.2018 um 17:00 schrieb Eduardo Diaz:
> Alan:
>
> What about the part of the statements that smaller firms do not have 
> to comply with the GRDP rules as a standard. Is it true?
>
> On Mon, Apr 30, 2018 at 10:50 AM Alan Greenberg 
> <alan.greenberg at mcgill.ca <mailto:alan.greenberg at mcgill.ca>> wrote:
>
>     GDPR generally applies to all businesses.
>
>     There is an exemption about not maintaining records of how data is
>     used, but if a person requests such a record, you would have to
>     reconstruct it after the fact.
>
>     I was not aware of any exemption on publishing why and how data is
>     collected and processed, but that may be ignorance on my part.
>
>     Alan
>
>
>
>     At 30/04/2018 10:22 AM, Eduardo Diaz wrote:
>
>>     A friend of mine quoted the following from an article written
>>     here (bullet #9):
>>     https://government.diginomica.com/2018/01/22/gdpr-compliance-here-are-the-14-things-you-actually-need-to-do/
>>
>>
>>
>>     */"Smaller firms – those defined as hhaving 250 employees or less
>>     – do not have to comply with all GDPR rrules as standard. If your
>>     organisation falls into this band, thereâ€™s no need to have
>>     documentation of why personal data is being collected and
>>     processed, the information youâ€™re storing or how long for.
>>     Smaller firms are not required to maintain a record of processing
>>     activities unless this carries a risk to the rights and freedoms
>>     of data subjects, it is a regular occurrence, or it relates to
>>     certain data like criminal convictions and offences."
>>     /*
>>
>>     The question: Is this statement true or false. If false what 's
>>     the real thing?
>>
>>     Thanks to whomever answers this.
>>
>>     -ed
>>
>>     Content-Type: text/plain; charset="us-ascii"
>>     Content-Transfer-Encoding: 7bit
>>     Content-Disposition: inline
>>     X-Microsoft-Exchange-Diagnostics:
>>     1;YTOPR01MB0396;27:Ytj/AIpssqiibmKnz50JsE2dlIuhl4mAZZ7KgUS70r3MLVG2H5KbNLby1tvjuxmL9xkihjOX8lTqRqdvkojOVcdFn+7J6Rg9dLd4q6K0sBwFMmlBydtVxY/DHJHtiGSJ
>>     X-Microsoft-Antispam-Message-Info:
>>     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
>>
>>     ------
>>     NA-Discuss mailing list
>>     NA-Discuss at atlarge-lists.icann.org
>>     <mailto:NA-Discuss at atlarge-lists.icann.org>
>>     https://atlarge-lists.icann.org/mailman/listinfo/na-discuss
>>
>>     Visit the NARALO online at http://www.naralo.org
>>     <http://www.naralo.org/>
>>     ------
>
>
>
> ------
> NA-Discuss mailing list
> NA-Discuss at atlarge-lists.icann.org
> https://atlarge-lists.icann.org/mailman/listinfo/na-discuss
>
> Visit the NARALO online at http://www.naralo.org
> ------

-- 
Bei weiteren Fragen stehen wir Ihnen gerne zur Verfügung.

Mit freundlichen Grüßen,

Volker A. Greimann
- Rechtsabteilung -

Key-Systems GmbH
Im Oberen Werk 1
66386 St. Ingbert
Tel.: +49 (0) 6894 - 9396 901
Fax.: +49 (0) 6894 - 9396 851
Email: vgreimann at key-systems.net

Web: www.key-systems.net / www.RRPproxy.net
www.domaindiscount24.com / www.BrandShelter.com

Folgen Sie uns bei Twitter oder werden Sie unser Fan bei Facebook:
www.facebook.com/KeySystems
www.twitter.com/key_systems

Geschäftsführer: Alexander Siffrin
Handelsregister Nr.: HR B 18835 - Saarbruecken
Umsatzsteuer ID.: DE211006534

Member of the KEYDRIVE GROUP
www.keydrive.lu

Der Inhalt dieser Nachricht ist vertraulich und nur für den angegebenen Empfänger bestimmt. Jede Form der Kenntnisgabe, Veröffentlichung oder Weitergabe an Dritte durch den Empfänger ist unzulässig. Sollte diese Nachricht nicht für Sie bestimmt sein, so bitten wir Sie, sich mit uns per E-Mail oder telefonisch in Verbindung zu setzen.

--------------------------------------------

Should you have any further questions, please do not hesitate to contact us.

Best regards,

Volker A. Greimann
- legal department -

Key-Systems GmbH
Im Oberen Werk 1
66386 St. Ingbert
Tel.: +49 (0) 6894 - 9396 901
Fax.: +49 (0) 6894 - 9396 851
Email: vgreimann at key-systems.net

Web: www.key-systems.net / www.RRPproxy.net
www.domaindiscount24.com / www.BrandShelter.com

Follow us on Twitter or join our fan community on Facebook and stay updated:
www.facebook.com/KeySystems
www.twitter.com/key_systems

CEO: Alexander Siffrin
Registration No.: HR B 18835 - Saarbruecken
V.A.T. ID.: DE211006534

Member of the KEYDRIVE GROUP
www.keydrive.lu

This e-mail and its attachments is intended only for the person to whom it is addressed. Furthermore it is not permitted to publish any content of this email. You must not use, disclose, copy, print or rely on this e-mail. If an addressing or transmission error has misdirected this e-mail, kindly notify the author by replying to this e-mail or contacting us by telephone.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://atlarge-lists.icann.org/pipermail/na-discuss/attachments/20180430/923f3ffa/attachment-0001.html>