Definitions

Dear all, 

here are several definitions for terms related to our vocabs from GDPR. THanks to Niklas for summarizing this. 
I'd like to discuss whether we can take them as is for our group:

1)  Data Controller (Art 4 No. 7 GDPR)

A natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purpose and means of the processing of personal data(; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law)

(Voigt, p.18)

2)  Data Processor (Art 4 No. 8 GDPR)

A natural or legal person, public authority, agency or other body that proceses personal data on behalf of the controller. (Art 4 No. 8 GDPR) (Voigt, p.20)

3)  Data Recipient (Art 4 No. 9 GDPR)
A natural or legal person, public authority, agency or another body, to which the

personal data are disclosed, whether a third party or not

4)  Data Subject (implicit in Art 4 No. 11 GDPR)

An identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

5)  Consent (Art 4 No. 11 GDPR)

Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.









References:




Voigt, Paul, von dem Busche, Axel. The EU General Data Protection Regulation (GDPR). A practical Guide. Cham: Springer International Publishing, 2017.

GDPR. Art. 4. Retrieved from: https://gdpr-info.eu/art-4-gdpr/ (viewed on 10th October 2018).