Käsiteltävien henkilötietojen tunnistaminen - Erityiset henkilötietoryhmät tai rikostuomioihin ja rikoksiin liittyvät tiedot

The organization shall maintain a list of data sets contained in the data stores it manages.

The documentation shall include at least the following information:

• Data systems and other means used to process the data sets
• Key categories of data in the data set (and whether it contains personal data)
• Data retention period (discussed in more detail in a separate task)
• Information on archiving / disposal of data (discussed in more detail in a separate task)

We know whether the processing of personal data involves information related to criminal convictions and violations.

If we process personal data relating to criminal convictions and offenses, we carry out the processing either under the supervision of an authority or the processing must be permitted by Union law / Member State law where appropriate safeguards are in place to protect the data subject's rights and freedoms.