What exactly is the GDPR?

The GDPR or General Data Protection Regulation establishes a harmonised set of rules applicable to all forms of personal data processing by both public and private organisations and/or companies. The size of these organisations is irrelevant. The organisations must be established in the European Economic Area (EEA) or target EU citizens. The primary purpose of the GDPR is to ensure that personal data enjoys the same high standard of protection throughout the EEA, to increase legal certainty for both individuals and organisations processing data, and to provide a high level of protection for individuals.

The regulation entered into force on May 24, 2016 and has been applicable since May 25, 2018.

The law defines personal data as any information relating to an identified or identifiable individual. An identifiable individual is anyone who can be identified, directly or indirectly. Different pieces of information that, when combined, can lead to the identification of a specific person also fall under the category of personal data.

Examples of personal data include:

first and last name
an address
an email address
an identity card number or passport number
location data
an IP address (Internet Protocol)
a cookie ID
bank accounts
tax records
biometric data (such as fingerprints)
test results
school grades
browser history
a photo of an individual
a number plate
...

What is the difference between pseudonymised data and anonymised data?

Pseudonymisation consists of transforming personal data so that it can no longer be attributed to a specific person without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an individual. In practice, this may mean that personal data (surname, first name, personal number, telephone number, etc.) in a data set is replaced by indirectly identifying data (alias, serial number, etc.). Pseudonymised data is still personal data and is subject to the GDPR.

Anonymised data is data that has been anonymised in such a way that the individual is not or no longer identifiable in any way that is reasonably likely to be used. When anonymisation is implemented correctly, the GDPR no longer applies to the anonymised data.

(Source: EDPB)

01.

What is a data register and why is it important?

A data register contains information about the personal data you process in your company or organisation. Creating such a data register is mandatory. You cannot avoid it. The Data Protection Authority (GBA) can ask you to submit the register at any time, and you must do so upon first request. That is why such a register must also be created in writing.

More info

03.

How does Humidor fit within this context and my organisation?

The first step required to comply with the regulations is to draw up a data register. Humidor takes care of this for you. What's more, it is a handy tool that intuitively helps you to draw up your data register correctly. The tool is available online, so you don't need to install any additional software. And with the licence formula, Humidor is also adapted to the latest web updates.

More info

Back

How much will it cost me?

No headaches and a slap on the wrist compared to the fine you risk if you don't have a data register.

Monthly rate

15 euros / month

Humidor does not require any software installation and can be set up online via your existing web browser. A subscription costs 15 euros per month and is automatically renewed unless you indicate that you do not wish to renew. The subscription is valid per month and is not partially refunded for any month that has already started.

Order

Annual rate

165 euros / year

Sign up for a full year and get one month for free. Here too, you can use the tool via your classic web browser. The full year will be charged at the start and is non-refundable if the subscription is cancelled during the year.

Order