Your App or IOT device on this site!

Have users given permission to process data and know that it is necessary for the purpose for which the app is used?*

Yes
No

Which categories of personal data do you process?*

Only common data
Common data and sensitive data
Common data, sensitive data and data relating to criminal convictions and offences
Common data and data relating to criminal convictions and offences

Do you use content data for further processing?*

No
Yes, only for purposes for which the data is initially collected.
Yes, for purposes for which the data is collected and for personalized advertisements.
Yes, for purposes for which the data is collected and for research.
Yes, for purposes for which the data is collected and for research and statistics
Yes, for purposes for which the data is collected and for sale to third parties
Yes, for purposes for which the data is collected and for self-promotion
Yes, for purposes for which the data is collected, for research, for statistics and for sale to third parties

Do you provide information to your users about how all data is processed by you?*

Yes
No

Do you provide information to your users about any other purposes of data processing than for the original purposes?*

Yes, and user has the option to refuse this
Yes
No

Can the user easily view his / her data?*

Yes, and can customize and remove the data
Yes, and can customize the data
Yes, and can remove the data
Yes, can view but not change and remove the data
No

Have you appointed a DPO (Data Protection Officer)?*

Yes, altough we don't meet the conditions under art. 37
No, we don't meet the conditions under art. 37
Yes, we meet the conditions under art. 37
No, although we meet the conditions under art. 37

Have you duly authorised your employees to process personal data?*

Yes
No

Have you duly regulated your relation with data processors through a Data Processing Agreement, a Data Pro Code, or a Data Pro Statement?*

We do not work with (external) data processors
Yes
No
Only for some data processors

Please select which data subject rights mentioned below you are able to comply with.*

How do you inform end-users when making changes to privacy policy, or to how collect, use or disclose personal information.*

We inform users in advance about updates to your app’s privacy policy.
We give users reasonable time to provide feedback before we implement changes.
We tell users exactly what rules we are changing so they don’t have to compare the new and old policies to understand what’s happening.
If we are including new features, especially features that involve disclosing information to third parties, we make the changes easy to find and understand through the update process.
Wherever possible, we seek express consent from users to any changes that could impact on their privacy.
We never make silent app updates that will diminish the user’s privacy.
We do not inform users.

Do you have procedures in place to take action on requests or complaints from users about damage or influence that violate their rights (eg Helpdesk, dedicated email boxes)?*

Yes
No
Only for some rights

Can the user withdraw consent in the same way that it was given?*

Yes
No

What different personal aspects do you use for the functioning of your App in the data processing of your users?*

We do not process users' personal data
We only use age and gender in data processing
We only use age, gender, profession and marital status (married, unmarried, etc.) in the data processing.
We only use age, gender, profession, home address and marital status (married, unmarried, etc.) in the data processing.
In data processing we use, among other things, age, gender, profession, home address, health conditions and marital status (married, unmarried, etc.)
In data processing we use, among other things, age, gender, profession, home address, religion, political preference and marital status (married, unmarried, etc.)
We use all available data in data processing.

Do you use user data to analyze, evaluate, predict and / or profile personal aspects with automated decision-making techniques?*

Yes, this is necessary for the app to function
Yes, this is necessary for the functioning of the app, but within the national legal frameworks.
Yes, this is necessary for the functioning of the app, within the national legal frameworks and only if the user has given permission for this.
We do not work with automated decision-making techniques

What steps do you take to ensure that the data is processed lawfully, fairly and in a transparent manner in relation to the data subject?*

We set the privacy settings as the most protective by default.
We notified your users of the default privacy settings and how to change them.
We use a plain and clear language in privacy settings, they are easy to find, and user-friendly.
We only handle individuals’ data in ways they would reasonably expect, or you can explain why any unexpected processing is justified.
We have considered how the processing may affect the individuals concerned, and you can justify any adverse effects.
We do not deceive or mislead people when you collect their personal data.
None

Have you carried out any DPIA (Privacy Impact Assessments (PIAs) & Data Protection Impact Assessments (DPIAs)?*

No, it was not necessary
Yes
No

Are appropriate technical and organizational measures taken to ensure and demonstrate that the processing is in accordance with the GDPR?*

Yes, after an incident
Yes, annualy
Yes, monthly
Never

Your App or IOT device on this site!

Step 1 of 7

Headlines iapp.org