Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Notice Of Personal Data Processing
1. Identity and Contact Details: Information about the data controller, including company name, registration number, address, and contact details of the Data Protection Officer (if applicable)
2. Types of Personal Data: Detailed description of the categories of personal data being processed
3. Purposes of Processing: Clear explanation of why the personal data is being collected and processed, including the legal basis for each purpose
4. Legal Basis: Specification of the legal grounds under Article 6 (and Article 9 if applicable) of GDPR for each processing activity
5. Recipients of Personal Data: Information about who receives or has access to the personal data, including any third-party processors
6. International Transfers: Details of any transfers of personal data outside the EU/EEA and the safeguards in place
7. Retention Periods: Information about how long personal data will be stored, or the criteria used to determine this period
8. Data Subject Rights: Explanation of individual rights under GDPR, including access, rectification, erasure, and data portability
9. Right to Withdraw Consent: Information about the right to withdraw consent where processing is based on consent
10. Right to Complain: Information about the right to lodge a complaint with the Danish Data Protection Agency
11. Automated Decision-Making: Information about any automated decision-making, including profiling, and its significance and consequences
1. Special Categories of Data: Additional information required when processing sensitive personal data under Article 9 GDPR
2. Employee Data Processing: Specific information about workplace monitoring and employee data processing, required when the notice applies to employees
3. Marketing Communications: Additional information required when personal data is used for direct marketing purposes
4. Cookie Information: Details about website cookies and similar technologies, required when the organization operates websites or apps
5. Children's Data: Special provisions for processing children's personal data, required when services are offered to children
6. CCTV Monitoring: Specific information about video surveillance, required when CCTV systems are in use
7. Biometric Data Processing: Additional information required when processing biometric data for identification purposes
1. Schedule 1 - Detailed Processing Activities: Comprehensive list of specific processing activities, including purposes, data categories, and retention periods
2. Schedule 2 - Third Party Processors: List of data processors, their locations, and the processing activities they perform
3. Schedule 3 - Technical and Organizational Measures: Description of security measures implemented to protect personal data
4. Schedule 4 - Cookie List: Detailed list of cookies used, their purposes, and duration
5. Schedule 5 - International Transfer Mechanisms: Details of transfer mechanisms used for international data transfers, including Standard Contractual Clauses or adequacy decisions
Authors
Processing
Data Subject
Data Controller
Data Processor
Special Categories of Personal Data
Consent
Legitimate Interest
Data Protection Officer
Supervisory Authority
Datatilsynet
Third Party
Recipient
Filing System
Profiling
Pseudonymization
Data Minimization
Cross-border Processing
International Transfer
Data Protection Impact Assessment
Binding Corporate Rules
Standard Contractual Clauses
Automated Decision-Making
Joint Controllers
Cookie
Log Data
Technical and Organizational Measures
Data Breach
Right of Access
Right to Rectification
Right to Erasure
Right to Data Portability
Privacy Notice
Data Protection Legislation
Data Protection Officer Contact
Purpose Specification
Legal Basis
Data Categories
Data Recipients
Data Transfers
Retention Period
Data Subject Rights
Withdrawal of Consent
Complaint Rights
Automated Decision Making
Data Security
Data Sharing
International Transfers
Cookie Usage
Marketing Communications
Data Collection Methods
Mandatory Information
Children's Privacy
Updates to Notice
Contact Information
Breach Notification
Special Categories Processing
Legitimate Interests
Third Party Processing
Data Protection Measures
Record Keeping
Employee Monitoring
CCTV Recording
Find the exact document you need
Download our whitepaper on the future of AI in Legal
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our Trust Centre for more details and real-time security updates.
Read our Privacy Policy.