GDPR: protection of personal data

The GDPR (General Data Protection Regulation) is EU law protecting the privacy and personal data of European Union citizens.

What personal data are

Any information that makes it possible to identify a person, for example a name, national ID number, IP address, email address or biometric data.

Main rights of citizens

• The right to access and rectify their data.
• The right to erasure of data (the “right to be forgotten”).
• The right to object to processing, for example for marketing purposes.
• The right to transfer data to another entity.

Obligations of companies and public offices

They must collect only necessary data, ensure its security and inform about the purpose of processing. Managing data requires explicit consent or a legal basis.