Example Labels

Three example privacy labels to get a better picture...

Our example Company

Book Web shop Example from Ireland makes targeted recommendations for books to people. Example sells books online since 2010.Web shop users choose 10 book titles and 5 genres, after which automated suggestions are shown. For this process, Example uses artificial intelligence developed by AI-pro.‍ Example makes recommendations based on your own purchases, books content, reading preferences, behaviour on the website, and (reading) behaviour of others with the same preferences. Example has a datalake on a world wide cloud server hosted by Skydata, containing al this information. Example shares the cloud server with AI-pro in order for AI-pro to improve its algorithm.

Three different Privacy Labels of this webshop...

General Privacy Label

Privacy Label of Example webshop This Privacy Label is the general label of our example webshop. This basicly is a summary of its privacy statement.
Collected data we receive from you personal data This is data you have explicitly and knowingly shared with this organisation. learn more You give us the information you share in your profile. Also, you choose books and genres you like and give us information in order to send you your books. we receive from others aggregated data personal data sensitive personal data special categories data This is data about you, this organisation received from another organisation. learn more AI-pro's algorythm supplies us with recommendations on books you might like we observe personal data sensitive personal data special categories data This is data about you, this organisation gathered by observing you (online) behaviour. learn more We observe what books you purchase, your reading preferences, behaviour on the website. we create personal data sensitive personal data special categories data This is data about you, this organisation made itself learn more We make recommendations based upon what we information we have from you and based upon others with the same preferences	location most data is processed outside the EU If data about you is processed outside the EU, the laws of those countries may apply to the data too. learn more Most of our data is stored on our world wide cloud server. duration most data less than a month This amount of personal data is stored for one month or less by this organisation. According to the GDPR personal data may not be stored for a longer period than is necessary for the purpose for which it was obtained. learn more learn more some data less than 1 year This amount of personal data is stored for one year or less by this organisation. According to the GDPR personal data may not be stored for a longer period than is necessary for the purpose for which it was obtained. learn more learn more a little data less than 10 years This amount of personal data is stored for ten years or less by this organisation. According to the GDPR personal data may not be stored for a longer period than is necessary for the purpose for which it was obtained. learn more learn more
Usage Providing goods and services Certain information about you might be used by this organisation in order to provide you a good or a service learn more marketing marketing_ux learn more Sales and customer relations sales_and_customer_relations_ux learn more financial administration Certain information about you might be used by this organisation for its financial administration. learn more human resources Certain information about you might be used by this organisation for human resources. learn more automated decision making we do not make use of automated decision making Automated decision making is a judgement about you generated by a computer. Profiling is when this judgement generates a profile of your behaviour. European law dictates you can always talk to a human if you feel the judgement is incorrect or incomplete. learn more	Legal basis we have a contract The processing of your personal data is necessary for a contract you have with this organisation. learn more By buying books in our online shop we engage in a contract with you to deliver those book to you. we have a legitimate interest This organisation considers processing your data necessary for the purpose of its legitimate interest and it does not a conflict with your own interests. learn more We believe we have its within yours and our interest to develop the algorithm together with AI-pro, since we can give you beter recommendations on books you might like. we have a legal obligation The processing is necessary for this organisation to comply with the law. learn more We have a some legal obligations like giving infomration for tax you gave consent You have given clear consent this organisation for to process your personal data for a specific purpose. learn more For our newsletter and for instance when you fill in a questionniare at our website.
Data sharing we share data with service providers This organisation shares your personal data with organisations in order to provide a service. learn more We share you contact information with logistics service companies to send the books you orderd. we share data with partners This organisation shares your personal data with partner organisations. Proper arrangements have been made with this partner. learn more We share our cloud server with AI-pro in order for them to improve the algoritm which helps you choose new books. we share data with processors This organisation shares your personal data with processors. A processor simply processes personal data on behalf of the controller. This organisation has complete control on how the processor operates. learn more Skydata is hosting our cloud server. we share data with advertisers This organisation shares your personal data with advertisement organisations. Advertisement organisations use your personal data in order to personalise adds. learn more We share your online behavour, by using cookies, to sell advertisements on your website we share data with government This organisation shares your personal data with governmental organisations. learn more We share information like financial details with the governemnt because it's obligated by law.	Take action Contact our privacy officer info@privacylabel.org 0612345678 Read our privacy policy
Last updated 2019-11	Privacy Label version 2019-09 BETA

Questionnaire Label

Now, Example is performing a small research on which news papers users read. Example has a questionnaire on the website. They will use the information from the questionnaire only for this small research. The GDPR states that controllers shall provide information to the data subject without undue delay. Therefore customers of the web shop should be informed on what happens to their personal data when they fill in the questionnaire. Here Privacy Label can give the specific information on what happens with their personal data, specified for the questionnaire.

Privacy Label Questionnaire This Privacy Label shows an example of privacy communication for a questionnaire on a website.
Collected data we receive from you personal data This is data you have explicitly and knowingly shared with this organisation. learn more By answering the questions in this questionnaire, you give us your personal data.	location most data is processed outside the EU If data about you is processed outside the EU, the laws of those countries may apply to the data too. learn more We store the information in our world wide cloud server hosted by Skydata duration most data less than a month This amount of personal data is stored for one month or less by this organisation. According to the GDPR personal data may not be stored for a longer period than is necessary for the purpose for which it was obtained. learn more We do not store the information you give us in this questionnaire for longer than a month after you send it to us.learn more
Usage research Certain information about you might be used by this organisation for research purposes. learn more We are erforming a small research on which news papers our users read. automated decision making we do not make use of automated decision making Automated decision making is a judgement about you generated by a computer. Profiling is when this judgement generates a profile of your behaviour. European law dictates you can always talk to a human if you feel the judgement is incorrect or incomplete. learn more	Legal basis you gave consent You have given clear consent this organisation for to process your personal data for a specific purpose. learn more You consent by sending in your information in this questionnaire.
Data sharing we share data with partners This organisation shares your personal data with partner organisations. Proper arrangements have been made with this partner. learn more We share the information with Skydata. Skydata hostes our cloud server.	Take action Contact our privacy officer info@privacylabel.org 0612345678 Read our privacy policy
Last updated 2019-11	Privacy Label version 2019-09 BETA

Vacancy Label

The web shop is doing well. Example has some new vacancies. To fulfill a vacancy Example processes certain information of potential candidates. They ask for some basicinformation, a curriculum vitae and an application letter. Without consent, Example will only use that information for this specific vacancy.

Privacy Label Job Application This Privacy Label shows an example for privacy communication for a job application
Collected personal data Personal data is data that says something about you as an individual. In short: all the information that makes you. We distinguish aggregated, normal and sensitive personal data. Organisations collect personal data in different ways. learn more we receive from you personal data sensitive personal data For this job application, we only use personal data on your CV and motivation letter you provide yourself.	Location Personal data could be processed on different locations. In the EU, the GDPR is in place. If data about you is processed outside the EU, the laws of those countries may apply to the data too. learn more no data is processed outside the EU All infromation is processed in our own office. Duration Once personal data is collected you should know that organisations cannot store it indefinitely. The rule of thumb here is: you must not keep personal data for longer than you need it for the goal its collected. learn more most dataone month or less We will remove your information within one month after we found our new employee. Only if you consented, we will store your infomration longer. learn more
Purpose When an organisation wants to process information about you, they need a specific goal to do so. Personal data may not be used for other purposes than it’s collect for initially. learn more human resources We will use your personal data in order to find the perfect candidate for this job.	Legal basis If an organisation wants to process data about you, they need to have a specific goal and a lawful basis. The lawful basis is the foundation for data processing under the GDPR. There are 6 lawful bases to base a processing activity. learn more consent You consent by sending your CV and motivation letter to us.
Data sharing Organisations can also share personal data with other organisations. This can be done for the execution of a task, or for a collaboration. Sometimes data must be shared because of a government. Or data can be sold to another organisation. learn more processors We make use of the services of a number of specialist suppliers in the field of ICT.	Take action Personal data could be processed on different locations. In the EU, the GDPR is in place. If data about you is processed outside the EU, the laws of those countries may apply to the data too. learn more Read our privacy statement Manage your data Contact our privacy representative info@privacylabel.org 0612345678
Last updated 2019-11	Privacy Label version 2019-09 BETA