Document background
This Privacy Notice GDPR is essential for any organization processing personal data while operating under Austrian jurisdiction. It fulfills the fundamental GDPR requirement of transparency in data processing activities, as mandated by both EU regulations and Austrian national law. The document should be implemented when an organization begins processing personal data or needs to update its existing privacy documentation to reflect changes in processing activities or regulatory requirements. It provides comprehensive information about data collection, processing purposes, legal bases, data subject rights, and security measures, while incorporating specific requirements from the Austrian Data Protection Act (DSG) and guidance from the Austrian Data Protection Authority (DSB). The notice must be easily accessible, written in clear language, and regularly reviewed to ensure ongoing compliance with both Austrian and EU data protection standards.
