Skip to main content
Logo of the website, go to the homepage

Privacy and Personal Data

Privacy and personal data impact almost every digital process in your organization. Think about cookies on your website, photos you share after an event, or the newsletter you send out. The GDPR sets rules for this but does not hinder your work. Do you know what data you process and why? Then you can work carefully without unnecessary risks. This way, you not only build compliance but also trust with your audience.

Home

This is Privacy and Personal Data

Discover what the GDPR means in practice for your organization. From cookies and audience data to photos of your event: the same basic principles apply wherever you process personal data. Read here how to properly arrange consent, legal bases, and retention periods.

Foto's en filmpjes van mensen online delen: wat mag wel, wat mag niet?

  • Privacy and Personal Data
  • Kennis

Digital legislation for the cultural sector: a practical overview

  • Work on your digital foundation
  • Article

GDPR in practice: 5 steps to properly use personal data

  • Work on your digital foundation
  • Article

Cookies on your website: what is allowed and what is not according to the GDPR?

  • Privacy and Personal Data
  • Article

Marketing and Audience Data

Do you use personal data for newsletters, social media campaigns, or audience research? Then additional rules apply beyond the GDPR basics, such as the spam prohibition and cookie legislation. We will elaborate on this theme in the coming period.
More about audience data

Step-by-Step Guide to GDPR Compliance: Lay the Foundation for Your Organization

In the Step-by-Step Guide to GDPR Compliance, you go through five clear steps to determine what your organization needs to arrange to comply with privacy laws and regulations. You can download it directly. 

Download the step-by-step guide

Practical Tools

To comply with privacy requirements as an organization, the GDPR imposes quite a few demands. For example, drafting a privacy statement and a processing register. How do you create these, and what should they include? 

DEN has compiled an overview with links to various practical tools that small organizations can easily use to comply with legislation! 

1. Processing Register and Privacy Statement

The Dutch Data Protection Authority (AP) has created templates for a processing register (opens in new tab) and a privacy statement (opens in new tab). These templates make it easier to comply with privacy rules and better protect the personal data of your visitors and employees. The templates also help you gain more control over how you handle personal data and explain it clearly to your visitors.

Want to learn more about what a processing register entails? This microlearning video (opens in new tab) created by the CIP (Center for Government Information and Privacy) (opens in new tab) dives deeper into the topic.

Read more information about the Dutch Data Protection Authority

2. Data Processor Agreement

DEN, in collaboration with De Roos Advocaten in Amsterdam, has drafted a current data processor agreement. You can download and fill out an example here.

Download the data processor agreement here

3. Data Breach Protocol

Is there a data breach in your organization? The Dutch Data Protection Authority (AP) provides an explanation of the steps you need to take.

Want to learn more about data breaches? Watch this microlearning video (opens in new tab)!

View the step-by-step plan for a data breach here