Tip
You can use existing services as templates for the information that must be obtained for a Custom Data Processing Service. You can retrieve the information itself from the provider of the service, for example from Google Analytics.
If you have the possibility to contact a representative from the provider, they can answer the following questions so that you do not have to collect the data yourself:
| Question | Field the info is entered |
|---|---|
|
What is the name of the Technology? |
General → Service Name |
|
What is the purpose of service in a few sentences? |
General → Service Description |
|
For what purpose are the data collected? |
Data → Data Purposes |
|
Which data properties are used, what characteristics do the data have (e.g. cookies, usage data)? |
Data → Data Attributes |
|
Exactly which data is collected or processed (e.g. IP address, location)? |
Data → Data Collected List |
|
To whom is the data forwarded or by whom it is processed? |
Data → Data Recipients |
|
When will the data be deleted again? |
Data → Retention Period Description |
|
Which technologies are used to collect data (e.g. tracking pixels, cookies)? |
Data → Technologies Used |
|
On what legal basis is the data collected and used? |
Data → Legal Basis |
|
What is the link to the contract data agreement of the data processing company? |
Data → Link to Data Processing Agreement
|
|
Does the entity have an IAB ID? |
Data → IAB ID |
|
What is the name of the legal entity (e.g. registered company name) of the company? |
Processor → Name of Processing Company |
|
What is the full postal address of the company? |
Processor → Address of Processing Company |
|
In which country the data is stored? |
Processor → Location of Processing |
|
What is the link to the privacy policy of the company? |
Processor → Policy of Processor |
|
What is the name of the company's data protection officer? |
Processor → Data Protection Officer |
|
Under which link can users object to the storage of their data? |
Processor → Opt-Out URL |
We recommend that you look for a representative at the processing company, if possible, so that you do not have to extract the individual details from the Data Protection Declaration yourself.