WEBVTT

00:00:05.492 --> 00:00:08.668
If your organisation stores
personal data,

00:00:08.693 --> 00:00:12.242
individuals have the right to
have their data erased.

00:00:12.357 --> 00:00:15.417
In other words, they have
the right to be forgotten.

00:00:15.480 --> 00:00:19.074
You must respond to an erasure
request as soon as possible

00:00:19.099 --> 00:00:21.730
and in any event within one month.

00:00:21.830 --> 00:00:25.634
An erasure request can be
communicated by different means,

00:00:25.659 --> 00:00:31.028
for example, via e-mail, letter or
via your app or website, if you have one.

00:00:31.191 --> 00:00:37.383
You must explain clearly how individuals can
make an erasure request to your organisation.

00:00:37.734 --> 00:00:41.805
If you’ve shared the personal data
in question with any third parties,

00:00:41.840 --> 00:00:45.239
you must also inform them
of the erasure request.

00:00:45.482 --> 00:00:47.786
Let’s look at a concrete example.

00:00:48.216 --> 00:00:53.322
Viviane used to have a motorcycle,
which your organisation sold to her.

00:00:53.557 --> 00:00:57.157
She then sold it, and now
she rides an electric bike.

00:00:57.640 --> 00:01:01.944
However, you, the seller, continue
to store her contact details

00:01:01.975 --> 00:01:06.375
in order to send her advertising
on the latest motorcycle models.

00:01:06.619 --> 00:01:12.025
If Viviane asks you to erase
her contact details, you must do so.

00:01:12.310 --> 00:01:18.310
You may also have shared, with Viviane’s consent,
her data with a helmet manufacturer,

00:01:18.422 --> 00:01:21.899
or with an equipment shop
for motorcycles in her area.

00:01:22.069 --> 00:01:26.940
In that case, you must contact
and inform these other organisations

00:01:26.965 --> 00:01:30.171
that your client requests
to delete her data.

00:01:30.714 --> 00:01:34.956
However, the GDPR provides some
exceptions to this principle;

00:01:35.160 --> 00:01:40.738
for example when you need to retain certain
data for a longer time to fulfil a legal obligation,

00:01:40.770 --> 00:01:43.027
such as keeping billing records.

00:01:43.387 --> 00:01:47.392
You can find information on
how to handle erasure requests

00:01:47.440 --> 00:01:52.016
in the EDPB Data Protection Guide for Small Business.