Translations:De GDPR en archiefzorg: wat is er nog mogelijk?/9/en

Proper processing means, among other things, that the processing of the data collected is done with respect for the person concerned in a manner that is aligned with this person’s expectations. For example, it is fair to process an email address in your address database to send a newsletter. It is however not considered proper to allow other organisations with a similar target audience to process this email address. Transparent processing relies mainly on open, clear and easy-to-understand communication about the processing. The person concerned must be able to see what data is collected and what happens with their personal data. This can be done by means of a privacy statement, for example.

A second important principle for processing personal data is that of purpose limitation. Processing must always take place in accordance with specific, explicit and legitimate purposes, for which the person concerned has given their permission in each case. In principle, the data may not then be processed in a way that is incompatible with those purposes, unless a legitimate interest can be demonstrated. A number of other principles derive from this principle of purpose limitation. For example, there is the principle of data minimisation, which states that the processing must remain limited to what is necessary for the purposes it is being processed for. There must also be storage limitation. The data may not be stored for longer than is necessary for the purposes listed for its collection.