E-UKRep

Information Processing

We confirm that currently, or in the near future, we process information relating to individual customers, potential customers or other individuals, or direct behavioural advertising to customers or other individuals in the UK

Legal name of Organisation/Entity*

This should be the correct legal title of the organisation

Phone Number*

Website

Address*

Name Of Individual*

First Last

This is the person primarily responsible for the privacy/data protection function in the organisation.

Job Title*

Email*

Direct Line Phone Number*

Contact Person Name 2*

First Last

This is a second point of contact in case the person primarily responsible for privacy/data protection leaves the organisation or is unavailable for some reason.

Contact 2 Job Title*

Contact 2 Email*

Contact 2 Phone Number*

Number of Employees*

This is relevant for the Article 30 record

Article 30 Record of Processing*

Upload our Article 30 Record of Processing
No Article 30 Record of Processing already prepared
We have determined that we don't need an Article 30 Record

Article 30 Record of Processing

Upload a PDF of our Article 30 Record of Processing
No Article 30 Record of Processing prepared yet
UK Rep will develop Article 30 record with me after Mini-Audit
We have determined that we don't need an article 30 record

Upload Article 30*

Accepted file types: pdf, doc, docx, Max. file size: 2 MB.

If your document is larger than 2MB, we will provide an alternative means as part of our onboarding discussion.

Fill in as many of the fields below that you can and if you have no answer place an 'X' in the field as all fields are required for submission.

Is the Personal Data/Personally Identifying Information you use data controlled by your organisation, or is it data that you process/use on behalf of someone else?*

It's my organisation's
It's someone else's
It's both

If the data is not your organisation's data, your organisation is processing for someone else, and your organisation is a 'processor' in UK law. Otherwise you are a 'controller'. An organisation can be both a controller for its own data and a processor for another organisation. An obvious example of a 'processor' is a payroll service provider company. The data it is processing is not its own, it is data provided by its customer, the 'controller'.

Where your organisation processes data for itself, what does that involve?*

State what processing it is that the organisation does for itself. Answers might be like “processing customer orders automatically, processing customer contact details by email, processing marketing information by mailshot, etc. The emphasis here is on the method of processing that your organisation does for itself.

What type of personal data is it?*

Answers might be like “HR data, Marketing Data, Customer Financial Data, Customer Health Data, Contact Data, etc. The emphasis here is on the types of data your organisation is processing for itself.

Where your organisation processes data for some other party, what does that involve?*

State what processing it is that your organisation does for that other organisation. Answers might be like “processing payroll, processing marketing information by mailshot, etc. The emphasis here is on the method of processing that your organisation does for some other organisation.

What type of personal data is it?*

Answers might be like “HR data, Marketing Data, Customer Financial Data, Customer Health Data, Contact Data, etc. The emphasis here is on the types of data your organisation is processing for some other organisation.

Do you use/process any of the following data? Race, Ethnic, Origin, Politics, Religion, Trade Union Membership, Genetics, Biometrics (where used for ID purposes), Health, Sex life, Sexual Orientation*

Yes
No

If you answered YES to the previous question, what purpose do you process this data for?*

Answers might be like "employee health data for pension and sickness policy reasons", "biometric data for door entry systems", "sexual data for health screening purposes" etc.

Who are the individuals whose data you process?*

Answers might be like “Customers", "Prospective Customers", "Suppliers", "Employees" etc.etc. Please note that we are only concerned with data relating to individuals in the UK.

Who are the individuals whose data you process?*

Answers might be like “Customers", "Prospective Customers", "Suppliers", "Employees" etc.etc. Please note that we are only concerned with data relating to individuals in the UK.

Does your organisation send/export data from the UK to organisations or individuals outside the UK?*

Yes
No

State both the Country and the type of organisation or individual you send the data to.*

Answers might be like “Japan, Car Manufacturers etc.”

State any legal safeguards you use to protect this data:*

Answers might be like "Standard contractual Clauses as approved by the UK, UK Adequacy Decisions as to approved jurisdictions etc.

Do you want individuals or Data Protection Authorities to be able to contact you directly with complaints or other issues related to compliance?*

Yes
No

You are given both choices by the GDPR. You can have information sent to us as your representative only, or you can have it sent to either your organisation or us. We recommend sending it only to us, as otherwise there may be confusion as to whether some communication was in fact sent.

How long do you store this data?*

Answers might be like “6 years for financial data, 2 years for marketing data, etc. This should based on your data retention practices.

Describe, in general terms, the technical security measures you use to keep the data secure.*

Answers might be like “Firewall, Locked filing cabinets, Anti malware software, Restricted access to necessary personnel, etc.

Consent*

I agree to the the Terms & Conditions.

This field is hidden when viewing the form

Product

Email

This field is for validation purposes and should be left unchanged.