DPV Semantics

Hi everyone,

I and Signatu contribute with new field values for the DPV taken from the
GDPR across Art 13 (Privacy Policy), 14 (Privacy Policy), 15 (access right
information) and 30 (Records of processing activities).

Please have a look:

Value categories DPV GDPR Art 13 GDPR Art 14 GDPR Art 15 GDPR Art 30.1 GDPR
Art 30.2
Data Subject FALSE A description of the categories of data subjects and of
the categories of personal data, GDPR Article 30.1(c).
Data Controller Identity FALSE Data Controller Identity, GDPR Art 13.1(a) Data
Controller Identity, GDPR Art 14.1(a) The name of the Data Controller, GDPR
Article 30.1(a) Data Controller Identity, GDPR Art 30.2(a)
Data Controller Contact Details FALSE Data Controller Contact Details, GDPR
Art 13.1(a) Data Controller Contact Details, GDPR Art 14.1(a) Data
Controller Contact Details, GDPR Article 30.1(a) Data Controller Contact
Details, GDPR Art 30.2(a)
Data Controller Representative FALSE Data Controller Representative, GDPR
Art 13.1(a) Data Controller Representative, GDPR Art 14.1(a) Data
Controller Representative, GDPR Art 30.2(a)
Data Protection Officer FALSE Data Protection Officer of Data Controller,
GDPR Art 13.1(b) Data Protection Officer of Data Controller, GDPR Art
14.1(b) Data Protection Officer of Data Controller, GDPR Article 30.1(a) Data
Protection Officer, GDPR Art 30.2(a)
Data Protection Office Contact Details FALSE Data Protection Officer
Contact Details, GDPR Art 13.1(b) Data Protection Officer Contact Details,
GDPR Art 14.1(b) Data Protection Officer Contact Details, GDPR Article
30.1(a)
Joint Controller FALSE The joint controller, where applicable, GDPR Article
30.1(a)
Data Processor FALSE The Data Processor, GDPR Art 30.2(a)
Data Processor Representative FALSE The Data Processor Representative, GDPR
Art 30.2(a)
Personal Data FALSE The personal data, GDPR Art 13.1(c) The categories of
personal data, GDPR Art 14.1(d) The categories of personal data,GDPR Art
15.1(b)
Personal Data Source FALSE From which source the personal data originate,
GDPR Art 14.2(f). Where the personal data are not collected from the data
subject, any available information as to their source, GDPR Art 15.1(g).
Personal Data Public or Private Source FALSE Whether the personal data
originate from publicly accessible sources, GDPR Art 14.2(f).
Personal Data Provision Legal Basis FALSE Whether the provision of personal
data is a statutory or contractual requirement, or a requirement necessary
to enter into a contract, GDPR Art 13.2(e).
Personal Data Provision obligation FALSE Whether the data subject is
obliged to provide the personal data, GDPR Art 13.2(e).
Consequence of data provision failure to provide personal data FALSE The
possible consequences of failure to provide personal data, GDPR Art 13.2(e).
Purposes FALSE Purposes of the Processing, GDPR Art 13.1(c) Data Controller
Identity, GDPR Art 14.1(c) The purposes of the processing, GDPR Art 15.1(a) The
purposes of the processing, GDPR Article 30.1(b)
Processing Categories Classes FALSE GDPR Art 4.2 The categories of
processing carried out on behalf of each controller, GDPR Art 30.2(b)
Processing Categories Classes FALSE
Automated decision-making and profiling FALSE The existence of automated
decision-making, including profiling, referred to in Article 22(1) and (4),
GDPR Art 13.2(f). The existence of automated decision-making, including
profiling, referred to in Article 22(1) and (4), GDPR Art 14.2(g). The
existence of automated decision-making, including profiling, referred to in
Article 22(1) and (4), GDPR Art 15.1(h).
Logic of automated decision-making and profiling FALSE Meaningful
information about the logic involved in automated decision-making,
including profiling, referred to in Article 22(1) and (4), GDPR Art
13.2(f). Meaningful
information about the logic involved in automated decision-making,
including profiling, referred to in Article 22(1) and (4), GDPR Art
14.2(g). Meaningful
information about the logic involved in automated decision-making,
including profiling, referred to in Article 22(1) and (4), GDPR Art 15.1(h).
Consequences of automated decision-making and profiling FALSE The
significance and the envisaged consequences of automated decision-making,
including profiling, referred to in Article 22(1) and (4) for the data
subject, GDPR Art 13.2(f). The significance and the envisaged consequences
of automated decision-making, including profiling, referred to in Article
22(1) and (4) for the data subject, GDPR Art 14.2(g).
Data transfer to third country FALSE Transfer of personal data to a third
country or to an international organisation, GDPR Art 13.1(f) Transfer of
personal data to a third country or to an international organisation, GDPR
Art 14.1(f). Transfer of personal data to a third country or to an
international organisation, GDPR Art 15.2. Transfers of personal data to a
third country or an international organisation, GDPR Article 30.1(e). Transfers
of personal data to a third country or an international organisation, GDPR
Art 30.2(c)
Third country name FALSE Identification of the third country or
international organisation, GDPR Article 30.1(e). Identification of the
third country or international organisation, GDPR Art 30.2(c)
Data transfer legal basis FALSE Legal Basis for transfer to a third
country, GDPR Art 13.1(f) Legal Basis for transfer to a third country, GDPR
Art 14.1(f). Legal Basis for transfer to a third country, GDPR Article
30.1(e). Legal Basis for transfer to a third country, GDPR Art 30.2(c)
Technical and Organisational Measures FALSE Where possible, a general
description of the technical and organisational security measures referred
to in Article 32(1), GDPR Art 30.1(g). Where possible, a general
description of the technical and organisational security measures referred
to in Article 32(1), GDPR Art 30.2.
Data storage period FALSE The period for which the personal data will be
stored, GDPR Art 13.2(a). The period for which the personal data will be
stored, GDPR Art 14.2(a). The envisaged period for which the personal data
will be stored, GDPR Art 15.1(d).
Criteria to determine data storage period FALSE The criteria used to
determine the period for which the personal data will be stored, GDPR Art
13.2(a). The criteria used to determine the period for which the personal
data will be stored, GDPR Art 14.2(a). The criteria used to determine
period for which the personal data will be stored, GDPR Art 15.1(d).
Time limit for data erasure FALSE Where possible, the envisaged time limits
for erasure of the different categories of data, GDPR Art 30.1(f).
Recipients FALSE Recipients of categories of recipients of the personal
data (if any), GDPR Art 13.1(e) The recipients or categories of recipients
of the personal data, if any, GDPR Art 14.1(e). The recipients or
categories of recipient to whom the personal data have been or will be
disclosed, in particular recipients in third countries or international
organisations, GDPR Art 15.1(c) The categories of recipients to whom the
personal data have been or will be disclosed including recipients in third
countries or international organisations, GDPR Article 30.1(d).
Legitimate interest of Data Controller FALSE Legitimate Interest (if the
processing is based on GDPR Art 6.1(f)), GDPR Art 13.1(d) Legitimate
Interest (if the processing is based on GDPR Art 6.1(f)), GDPR Art 14.2(b)
Legitimate interest of Third Party FALSE Legitimate Interest (if the
processing is based on GDPR Art 6.1(f)), GDPR Art 13.1(d) Legitimate
Interest (if the processing is based on GDPR Art 6.1(f)), GDPR Art 14.2(b)
Legal Basis FALSE Legal Basis for the Processing, GDPR Art 13.1(c) Legal
Basis for the Processing, GDPR Art 14.1(c)
Right to access FALSE The right to access to personal data, GDPR Art
13.2(b). The right to access to personal data, GDPR Art 14.2(c).
Right to rectification FALSE The right to rectification of personal data,
GDPR Art 13.2(b). The right to rectification of personal data, GDPR Art
14.2(c). The right to rectification of personal data, GDPR Art 15.1(e).
Right to erasure FALSE The right to erasure of personal data, GDPR Art
13.2(b). The right to erasure of personal data, GDPR Art 14.2(c). The right
to erasure of personal data, GDPR Art 15.1(e).
Right to restriction FALSE The right to restriction of processing
concerning the data subject, GDPR Art 13.2(b). The right to restriction of
processing concerning the data subject, GDPR Art 14.2(c). The right to
restriction of processing concerning the data subject, GDPR Art 15.1(e).
Right to object to processing FALSE The right to object to processing, GDPR
Art 13.2(b). The right to object to processing, GDPR Art 14.2(c). The right
to object to processing, GDPR Art 15.1(e).
Right to data portability FALSE The right to data portability, GDPR Art
13.2(b). The right to data portability, GDPR Art 14.2(c).
Right to withdraw consent FALSE The right to withdraw consent at any time,
without affecting the lawfulness of processing based on consent before its
withdrawal (where the processing is based on point (a) of Article 6(1) or
point (a) of Article 9(2)), GDPR Art 13.2(c). The right to withdraw consent
at any time, without affecting the lawfulness of processing based on
consent before its withdrawal (where the processing is based on point (a)
of Article 6(1) or point (a) of Article 9(2)), GDPR Art 14.2(d).
Right to lodge a complaint FALSE The right to lodge a complaint with a
supervisory authority, GDPR Art 13.2(d). The right to lodge a complaint
with a supervisory authority, GDPR Art 14.2(e). The right to lodge a
complaint with a supervisory authority, GDPR Art 15.1(f).

Best regards,
-- 
Georg Philip Krog

signatu <https://signatu.com>