🤔 What is a Privacy Policy?

A privacy policy outlines how an organization processes personal data. It should clearly explain:

A transparent privacy policy builds trust and assures users their data is secure.

📋 Who needs a Privacy Policy?

Any organization collecting personal data (via forms, petitions, surveys, etc.) must have a privacy policy in place.

To comply with GDPR, your privacy policy must detail:

Identity and Contact: Who is collecting the data.
Purpose: Why the data is being collected and its justification.
Legal Basis: GDPR’s 6 bases for data processing (e.g., consent, legal obligation).
Data Nature: Indicate if providing data is optional or mandatory.
Recipients: Who will access the data.
Storage Duration: How long data is retained.
User Rights: Access, correction, deletion, and data limitation rights.
Contact Details: For privacy-related questions or complaints.
Regulator Contact: Reminder of users' rights to lodge a complaint.

For indirect data collection, also include:

Add a link to your privacy policy in Space Settings > General > Privacy Policy.
Use a URL to a webpage or online document.

If you already have a privacy policy, remember to include Qomon (Dolphins SAS) as a subcontractor for petitions, forms, and questionnaires.

If you don’t have a privacy policy, you must create one to publish online forms. Options include:

Using the Qomon-provided GDPR template.
- Remember: It is your responsibility to customize the template to meet your specific regulatory needs.
Consulting a lawyer.
Using an online privacy policy generator.

For further assistance, contact us at [email protected].