External

Externals are persons external to your company who receive personal data from your company. They are fundamental for compliance with the GDPR. As a company, you must be able to provide information about which external persons have received personal data from you. This can be seen from a processing notification, which can be created from processing activities. In the processing activity, you specify which data which external person receives from you.

As a data protection expert or professional, you can see all external persons created in the data protection management system under "Data protection → External persons".

Here you can also enter new externals or edit existing ones.

Create / edit external

To create an external, click the "Plus" button in the overview.

To edit an external, double-click on the name in the overview.

Caution!: Once created, externals can no longer be deleted. They can only be changed from active to deactivated.

Abbreviation and designation:

Abbreviation: internal abbreviation of the external party.
Designation: e.g. name of the company that receives personal data.

Description:

Here you explain what the recipient does for you and for what he receives personal data.

Industry:

That industry in which the external is active.

Is responsible for processing activity:

Must be enabled for the external to be displayed in the selection for Responsible in a processing activity.

Recipient not in EU:.

If the recipient is not located in the EU, this must be marked. In addition, appropriate safeguards must also be specified for this case, so that these externals may receive personal data compliant with the General Data Protection Regulation.

Recipient is a processor:.

"Processor" can be a natural or legal person, a government agency, institution or other entity that processes personal data on behalf of your company. In the course of this, you must provide information about the scope of this processing and upload documents such as contracts and agreements with the processor.

Address:

The address of the external.

Contact:

Contact details of the external party.

Contact person:

The contact person at the external.