16. August 2022

Personal data

GDPR-compliant data processing explained

By Mira Suleimenova

Compliant data processing: the GDPR explained

The GDPR is the centerpiece of EU privacy law. It applies to the processing of all personal data, i.e. data, which can be attributed to a specific person.
After the initial access to the information on the end user device through cookies or other web trackers is established, all of your subsequent processing, e.g. forwarding usage data for reach measurement or targeted advertising, is no longer covered by the ePrivacy Directive and is to be measured solely against the standard of the GDPR.

Controller & Processor

If you operate a website, you are considered a controller within the meaning of GDPR regarding the processes you have influence on, namely the collection and transmission of personal data on your website. Therefore, you must thoroughly inform your visitors about the scope, purpose and legal basis of your data processing.

If you let another (natural or legal) person process the personal data on your website for you, this person is considered a processor under GDPR. In such cases, you must conclude a data processing agreement with your processors, which guarantees compliance with the GDPR level of data protection through sufficient technical and organizational measures.

Data processing legal bases & activities

The GDPR gives you more flexibility regarding the justification of your data processing than the ePrivacy Directive as there are more legal bases available. Commonly, data processing is based either on user consent, performance of contract or a legitimate interest. The pursuit of a legitimate interest comes into consideration only if the processing is necessary for your legitimate interests.

Please be aware that this only serves informational purposes and does not constitute legal advice.

READ MORE

Blog

Building Resilience against Analytics Outages: The Power of Raw Data Collection

Raw data tracking solutions provide businesses with reliable data collection, mitigating the risks of platform outages such as the recent GA4 disruption.

Blog

Fighting low Consent Rates with JENTIS Synthetic User AI-based Tracking Technology

JENTIS has introduced an innovative AI-based tracking technology with its Synthetic Users, offering marketers a new way to enhance data analytics and gain deeper insights.

Blog

Retail Media: The Rise of First-Party Data

In a world where third-party data is losing its grip, retail media offers brands a powerful alternative—delivering hyper-targeted ads exactly where purchase decisions are made. As privacy rules tighten, knowing how to tap into first-party data could be the key to staying ahead.