Individuals have the right to be informed when you process their personal data. For this reason, you must be transparent throughout the whole process and explain a set of aspects to the people affected so that they have all the information about the processing and about their rights. The aspects you must provide are, among others:
- Who the data controller is
- Who the data protection officer is, if applicable
- Purposes of the processing
- Legal basis of the processing
- Data retention period
- If there will be data transfers
- Rights that can be exercised by the data subject.
This information should be clear and concise, and can be organised into layers of information or levels to make it easier to understand.