WEBVTT

00:00:06.008 --> 00:00:09.340
When you store or process
people’s personal data,

00:00:09.365 --> 00:00:13.565
you should be clear and transparent
as to how you go about it.

00:00:13.676 --> 00:00:17.809
For example, if you run an
organisation repairing appliances,

00:00:17.872 --> 00:00:23.762
you need your customers' addresses and other
details to send a technician to carry out repairs.

00:00:24.111 --> 00:00:29.744
You must inform your customers about why
and how you process their personal data.

00:00:29.963 --> 00:00:35.689
This includes how long you plan to keep the data,
and if you plan to share them with anybody else.

00:00:35.811 --> 00:00:40.344
Customers must also be informed
about their rights under the GDPR.

00:00:40.530 --> 00:00:44.607
So when Alex gets in touch to have
his washing machine fixed,

00:00:44.702 --> 00:00:50.227
you have to explain to him what personal
data you store and how it will be used.

00:00:50.524 --> 00:00:57.625
You can do so for example via a clear privacy statement
on your website made available in your shop,

00:00:57.780 --> 00:01:03.155
or by informing Alex at the start of a phone call
where personal data could be exchanged.

00:01:03.372 --> 00:01:08.789
As a general rule: when you collect
personal data directly from individuals,

00:01:08.914 --> 00:01:15.447
don’t forget to inform them immediately that
you will process their data, and for what purposes.

00:01:15.740 --> 00:01:18.195
To learn more about the right to be informed,

00:01:18.265 --> 00:01:23.804
you can consult the EDPB Data
Protection Guide for Small Business.