The date the policy was modified. This date should be updated when you make any policy changes, but does not need to be updated if you are only correcting spelling or reorganising information.
The legal name of your organisation.
The contact address for your organisation. If you have appointed a Data Protection Officer you can leave this blank.
The name of your Data Protection Officer, if you have appointed one.
The contact address for your Data Protection Officer, if you have appointed one.
Data you process
Details of data you process. You can add new data and edit or delete existing data.
When you cllick to add or edit data the data window, as shown in figure 3, will open.
Figure 3. the data window
The data window lets you change the following settings:
Type of data
A description giving details of the data collected and why and how you process it.
Lawful basis for processing
The GDPR allows personal data to be processed for one of six reason. These are described in detail on the Information Commissioner’s Office site.
An explanation of why the selected lawful basis applies.