{"id":1425,"date":"2018-04-01T11:15:11","date_gmt":"2018-04-01T09:15:11","guid":{"rendered":"https:\/\/rebeccaschmitt.com\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/"},"modified":"2018-10-11T11:16:15","modified_gmt":"2018-10-11T09:16:15","slug":"what-to-prepare-for-the-eu-data-protection-regulation-2018","status":"publish","type":"post","link":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/","title":{"rendered":"What to Prepare for the EU Data Protection Regulation 2018"},"content":{"rendered":"<div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_1 1_1 fusion-one-full fusion-column-first fusion-column-last\" style=\"--awb-bg-size:cover;--awb-margin-bottom:0px;\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\"><div class=\"fusion-text fusion-text-1\"><p><strong>The EU Data Protection Regulation is a great thing. Its main advantage is to harmonise the European law and simplify the structure. <span lang=\"en\">That means that it will lead to a more uniform design of all product and service providers who want to sell within the EU or even from outside the EU.<\/span><\/strong><\/p>\n<p><span lang=\"en\">Currently the EU Data Protection Regulation gets a lot of attention due to the high fees in case of non-compliance. In addition, the regulation contains a novelty: the possibility of a class action, which is not commonplace in the European area.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2 id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">What is the EU Data Protection Regulation<\/span>?<\/h2>\n<p id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">The data protection regulation concerns above all the personal data. By principle this includes all data that makes a person identifiable, such as IP addresses, geodata, etc.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2 id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-medium\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">The Consequences of the Reversal of the Burden of Proof<\/span><\/h2>\n<p class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">The essential point of the Data Protection Regulation is the reversal of the burden of proof. Thus, the company has to prove that it does nothing wrong with the data of its customers. So far, this process has generally been reversed per se, so that the customer or website user had to prove to the company that the company had acted reprehensibly.<\/span><\/p>\n<p class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">In order to meet this burden of proof, we recommend a processing directory for each company that documents the company&#8217;s order and data processing. This also suggests that user data should be forgotten or deleted, for example, as soon as they are e.g. no longer needed for an order processing.<\/span><\/p>\n<p class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">In addition, it makes sense to take a data protection impact assessment in order to act in a transparent way for users and companies. As part of a new software development, this principle must be a priority during development. This can be summarized under the claim &#8220;Privacy by Design&#8221;.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2 class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">Each Data Collection asks for a Legal Basis<\/span><\/h2>\n<p id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">Only those data surveys are legitime, that are imperative to fulfill the contract or based on a clear voluntary consent. The last-mentioned case includes for example active signups to a newsletter via double opt-in. Nevertheless a right of revocation must be granted. The cases in which there is a legitimate interest in data may also be lawful under Article 6 (1) (f) GDPR. An assessment is made on the basis of the following criteria: type of data, transparency, data sensitivity, degree of data encryption, pseudonymisation and right of objection. This third aspect opens up a certain scope for considerations of interest.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2 id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-medium\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">Privacy Information requires Supplementation<\/span><\/h2>\n<p id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">The privacy policy should define who is responsible in a simple and easy-to-understand language. In addition, the purpose and legal basis of the data processing and the recipient of the data must be mentioned. Data transfers to non-European countries and the storage period must also be included. For companies with more than ten employees, the announcement of their own data protection officer is mandatory.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2 id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-medium\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">Extension of the Persons Concerned<\/span><\/h2>\n<div id=\"tw-target-text-container\" class=\"tw-ta-container tw-nfl\">\n<p id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">Each user has the right to get informed about their own data, the right of correction, the right to be forgotten or the deletion of data as well as the right to transfer their own data.<\/span><\/p>\n<\/div>\n<p>&nbsp;<\/p>\n<h2>The Sample of E-Mail Marketing<\/h2>\n<p id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">E-mail advertising is only allowed, if an explicit consent has been given. If the e-mail addresses of existing customers appear in a mailing that does not have explicit consent, this is legally incorrect. It calls for a final interpretation to what extent such a coupling of data use is legitimate.<\/span><\/p>\n<p id=\"tw-target-text\" class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">In general, data may only be stored as long as its needed for a user-confirmed purpose. The data can only be submitted to third parties under very strict conditions on the case of a clear legitimate interest.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2 class=\"tw-data-text tw-ta tw-text-medium\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">Immediate Duties<\/span><\/h2>\n<p class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">An update of your company&#8217;s privacy information is essential. In addition, you should be aware of what user data you collect in your organization and how you proceed those data. Identify all data processors and review the formulations of forms and privacy information. Make sure you have your own processing directory. Ensure it&#8217;s easy to understand when, where, why, and how long you&#8217;re collecting user data. If users request that information, the company is obliged to provide comprehensive information in time.<\/span><\/p>\n<p class=\"tw-data-text tw-ta tw-text-small\" dir=\"ltr\" data-placeholder=\"\u00dcbersetzung\"><span lang=\"en\">Corresponding support can also be found at <a href=\"https:\/\/www.trustedshops.co.uk\/individual-offer\/?a_aid=5aa2635db2036&amp;a_bid=7661bdfe\" target=\"_blank\" rel=\"noopener\">Trusted Shops<\/a>.<\/p>\n<\/div><div class=\"fusion-clearfix\"><\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":1365,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[115],"tags":[124],"class_list":["post-1425","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-e-commerce-en","tag-datenschutzverordnung-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What to Prepare for the EU Data Protection Regulation 2018 &#8211; Rebecca Schmitt<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What to Prepare for the EU Data Protection Regulation 2018 &#8211; Rebecca Schmitt\" \/>\n<meta property=\"og:url\" content=\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/\" \/>\n<meta property=\"og:site_name\" content=\"Rebecca Schmitt\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ReaSchmitt\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-01T09:15:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-10-11T09:16:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"650\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"RSchmitt\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ReaSchmitt\" \/>\n<meta name=\"twitter:site\" content=\"@ReaSchmitt\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"RSchmitt\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/\",\"url\":\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/\",\"name\":\"What to Prepare for the EU Data Protection Regulation 2018 &#8211; Rebecca Schmitt\",\"isPartOf\":{\"@id\":\"https:\/\/rebeccaschmitt.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg\",\"datePublished\":\"2018-04-01T09:15:11+00:00\",\"dateModified\":\"2018-10-11T09:16:15+00:00\",\"author\":{\"@id\":\"https:\/\/rebeccaschmitt.com\/#\/schema\/person\/697a6086decf64e4b88236e8bc0ab16b\"},\"breadcrumb\":{\"@id\":\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#primaryimage\",\"url\":\"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg\",\"contentUrl\":\"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg\",\"width\":1000,\"height\":650,\"caption\":\"What to Prepare for the EU Data Protection Regulation 2018\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/rebeccaschmitt.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What to Prepare for the EU Data Protection Regulation 2018\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/rebeccaschmitt.com\/#website\",\"url\":\"https:\/\/rebeccaschmitt.com\/\",\"name\":\"Rebecca Schmitt\",\"description\":\"Online Marketing &amp; E-Commerce Consultant M\u00fcnchen\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/rebeccaschmitt.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/rebeccaschmitt.com\/#\/schema\/person\/697a6086decf64e4b88236e8bc0ab16b\",\"name\":\"RSchmitt\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/rebeccaschmitt.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2cd91a37ee82ded04081f512a3150837850e87252e5f7ae67ea3b902c406c478?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2cd91a37ee82ded04081f512a3150837850e87252e5f7ae67ea3b902c406c478?s=96&d=mm&r=g\",\"caption\":\"RSchmitt\"},\"description\":\"...\",\"sameAs\":[\"https:\/\/rebeccaschmitt.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What to Prepare for the EU Data Protection Regulation 2018 &#8211; Rebecca Schmitt","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/","og_locale":"en_US","og_type":"article","og_title":"What to Prepare for the EU Data Protection Regulation 2018 &#8211; Rebecca Schmitt","og_url":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/","og_site_name":"Rebecca Schmitt","article_publisher":"https:\/\/www.facebook.com\/ReaSchmitt","article_published_time":"2018-04-01T09:15:11+00:00","article_modified_time":"2018-10-11T09:16:15+00:00","og_image":[{"width":1000,"height":650,"url":"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg","type":"image\/jpeg"}],"author":"RSchmitt","twitter_card":"summary_large_image","twitter_creator":"@ReaSchmitt","twitter_site":"@ReaSchmitt","twitter_misc":{"Written by":"RSchmitt","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/","url":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/","name":"What to Prepare for the EU Data Protection Regulation 2018 &#8211; Rebecca Schmitt","isPartOf":{"@id":"https:\/\/rebeccaschmitt.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#primaryimage"},"image":{"@id":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#primaryimage"},"thumbnailUrl":"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg","datePublished":"2018-04-01T09:15:11+00:00","dateModified":"2018-10-11T09:16:15+00:00","author":{"@id":"https:\/\/rebeccaschmitt.com\/#\/schema\/person\/697a6086decf64e4b88236e8bc0ab16b"},"breadcrumb":{"@id":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#primaryimage","url":"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg","contentUrl":"https:\/\/rebeccaschmitt.com\/wp-content\/uploads\/2018\/10\/Blog-rebeccaschmitt03.jpg","width":1000,"height":650,"caption":"What to Prepare for the EU Data Protection Regulation 2018"},{"@type":"BreadcrumbList","@id":"https:\/\/rebeccaschmitt.com\/en\/what-to-prepare-for-the-eu-data-protection-regulation-2018\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/rebeccaschmitt.com\/en\/"},{"@type":"ListItem","position":2,"name":"What to Prepare for the EU Data Protection Regulation 2018"}]},{"@type":"WebSite","@id":"https:\/\/rebeccaschmitt.com\/#website","url":"https:\/\/rebeccaschmitt.com\/","name":"Rebecca Schmitt","description":"Online Marketing &amp; E-Commerce Consultant M\u00fcnchen","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/rebeccaschmitt.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/rebeccaschmitt.com\/#\/schema\/person\/697a6086decf64e4b88236e8bc0ab16b","name":"RSchmitt","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/rebeccaschmitt.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2cd91a37ee82ded04081f512a3150837850e87252e5f7ae67ea3b902c406c478?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2cd91a37ee82ded04081f512a3150837850e87252e5f7ae67ea3b902c406c478?s=96&d=mm&r=g","caption":"RSchmitt"},"description":"...","sameAs":["https:\/\/rebeccaschmitt.com"]}]}},"_links":{"self":[{"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/posts\/1425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/comments?post=1425"}],"version-history":[{"count":1,"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/posts\/1425\/revisions"}],"predecessor-version":[{"id":1426,"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/posts\/1425\/revisions\/1426"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/media\/1365"}],"wp:attachment":[{"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/media?parent=1425"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/categories?post=1425"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rebeccaschmitt.com\/en\/wp-json\/wp\/v2\/tags?post=1425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}