It is free and needs no sign-up. Nothing you enter leaves your browser.
§ 1
Tool
§ 2
How it decides
Every processing operation needs a legal basis. Consent requires an act by the user, so a pre-ticked box does not count. Legitimate interest covers an internal staff directory, and the soft opt-in in Spanish e-commerce law lets you write to existing customers about similar products as long as they can unsubscribe from every message.
Data is used only as far as needed and only for as long as needed. Watching the entrance with a sign on display is lawful, and filming where staff take their breaks is prohibited. A fingerprint clock-in rarely passes the necessity test, and a CV is kept for the length of the hiring process and, with consent, for one or two years.
Article 32 GDPR requires measures that stop anyone from reaching the data: locked sessions, passwords out of sight, blind copy on bulk emails and shredded paper. The record of processing activities and a contract with every processor are the first documents an inspection asks for.
§ 3
Questions
Yes. The decisions cited are public and available on the Spanish data protection authority's website. The amounts are those of each decision, before reductions for voluntary payment.
No. The game runs in your browser and sends nothing.
Because mistaking a sound practice for an infringement also costs money. It is the newsletter you never send or the process you never launch out of fear.
No. The cases are simplified. An audit reviews your actual processing, contracts and systems.
§ 4
More tools
§ 5
Artículos
Sixty minutes on Google Meet with a qualified lawyer. It costs €90 including VAT and will be deducted from the first invoice if an engagement follows.
