GDPR POlicy

[CheneyPayroll]

Hi

this is my first post, and what a question to begin with.

one of my clients requires an updated Privacy Policy in line with the GDPR regulations.

I believe I'm a data processor, but all the templates that I can find are for the website.

have any of you come across such documents and where?

Thanks

Martyn

[GhostofTarbera]

Do you provide payroll services for your clients ?

Then you will be a processor

[CheneyPayroll]

Do you provide payroll services for your clients ?

Then you will be a processor

Thanks, yes i manipulate data and work on the software side of things but they still want to see a policy in terms of what i do i guess.

not really sure

[GhostofTarbera]

Can you see personal data of the people (name, address, NR numbers, payroll number etc)

[DaveB]

Hi

this is my first post, and what a question to begin with.

one of my clients requires an updated Privacy Policy in line with the GDPR regulations.

I believe I'm a data processor, but all the templates that I can find are for the website.

have any of you come across such documents and where?

Thanks

Martyn

As a payroll company then yes, you will be processing personal data. You need a GDPR privacy statement to issue to your clients, one for your staff and one for your website. Each one needs to include details of the data you collect, why you collect it, what you use it for, the legal basis for that, and inform the data subjects of their rights regarding that data.

You also need to have some basic processes in place to deal with Subject Access Requests, requests to remove data etc.

[northernladuk]

But late to be doing this innit?

[DaveB]

But late to be doing this innit?

Better late than never, at this stage showing willing to the ICO will get you some slack to sort things out provided you don't lose any data in the meantime.

[Lance]

Hi

this is my first post, and what a question to begin with.

one of my clients requires an updated Privacy Policy in line with the GDPR regulations.

I believe I'm a data processor, but all the templates that I can find are for the website.

have any of you come across such documents and where?

Thanks

Martyn

Yes you're a data processor.
Yes I've come across such documents, at my clients.

You need your own though. You can start with a template, how about your client's template as data owner., but it needs to fit your business. This isn't a tick-box exercise you pay lip service to.

You'll need to comply with their (your client) policy in any case, so perhaps you should work with them?