A Privacy Notice is a document that informs you about how the company uses and protects your personal data. It explains your rights, such as the right to access, correct and delete your data.
A Privacy Notice should be written in clear and understandable language. It should include:
- What personal data is collected by the company
- Why and how this information will be processed
- The legal basis for processing your personal data
- Who has access to your personal data, and how long it will be stored for
If there are any transfers of your information outside the European Economic Area (EEA) (for example, to a country outside the EEA) then this must be clearly stated.