| Category | Examples | Collected |
A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name |
Gender and date of birth | ||
Transaction information, purchase history, financial details, and payment information | ||
Fingerprints and voiceprints | ||
Browsing history, search history, online | ||
Device location | ||
Images and audio, video or call recordings created in connection with our business activities | ||
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | ||
Student records and directory information | ||
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | ||
Last updated: May 25, 2018
Write an introduction about your organization and your Privacy Policy. Show your awareness of keeping personal data private. Describe the goal and the meaning of this document for your members.
Add the description of what information are you going to collect? Why do you need it? Describe how are you going to use it, are you going to share personal information with others and and under what circumstances would you be willing to disclose personal information. Try to use simple and plain language. Special attention should be given to safeguarding the privacy of children especially if you work with them directly.
From GDPR law: “Given that children merit specific protection, any information and communication, where processing is addressed to a child, should be in such a clear and plain language that the child can easily understand.”
You should include information about how are you going to manage consent if members can provide personal data about others, for example while registering guests or adding bundle members.
You should inform your members if you share any personal data with third-party applications, and confirm with any third parties that they are prepared to respond to data requests from your members.
This is a very important section for your organization. Add your contact information (address, email, phone, fax, etc.) so that your users can contact with you with requests for personal information, or to change or delete their information.