GDPR

Each country in EU has to legitimate its own Data Protection Authority (DPA).
These authorities are asked to monitor and enforce the GDPR in the specific country.
They are also responsible for pronouncing the fines and the place to report any breaches.

List of Data Protection Authorities 

A pan-European GDPR committee has been set up. It consists of representatives from each European District
(D59, D71, D91, D95, D107, D108, D110) and a representative of Toastmasters International.

The committee is looking at issues connected with GDPR to provide help for operational implementation
and support all European toastmasters entities and their representatives in the compliant implementation of GDPR.

Whilst we await further details, please see the document, Preparing for the General Data Protection Regulation. The document outlines 12 steps to consider, please could you ensure that ALL club Presidents and VPE’s have reviewed all the steps, with particular attention to the following:

1. Awareness
2. Information you hold
3. Communicating privacy information
4. Individuals’ rights
5. Subject access requests
6. Lawful basis for processing personal data
7. Consent
8. Children
9. Data Breaches
10. Data Protection by Design and Data Protection Impact Assesments
11. Data Protection Officers

If your club is collecting information about its guests and/or members make sure that the privacy notice supports the GDPR
– see the following examples of privacy notices.

Most of our clubs use easySPEAK to manage the meetings and store data about the members and guests. Thanks to the efforts of Malcolm (the creator of this great tool) easySPEAK is being updated to fully support the GDPR by May 25th, 2018, and allows each club to correctly manage data about members and guests.

The Privacy Policy and Terms and Conditions have been updated, and they are now also included in the Registration screen for new users and displayed, with revision date, at the foot of all pages.

GDPR foresees that everyone has the right to be forgotten by the system, which means that upon request we should be able to delete all records of that person. For that a ‘right to be forgotten’ option will soon be available, together with a ‘right to know what we keep’ option. Users are prompted to review their personal data, including privacy choices and the Privacy Policy, at least once every 12 months – you may also have noticed recently that there is a box that invites you to update your personal data with attention to its privacy settings.

• LDS Baden-Württemberg – Datenschutz im Verein
• LDS Bayern
  • FAQ Vereine
  • Anforderungen für Vereine
  • Mustervereichnis der Verarbeitungstätigkeiten
• LDS Hessen – Handreichung für Vereine

DSK – Konferenz der unabhängigen Datenschutzbehörden des Bundes und der Länder

DSK – Datenschutzkonferenz – Kurzpapiere zur DS-GVO
Die Datenschutzkonferenz besteht aus den unabhängigen Datenschutzbehörden des Bundes und der Länder.

Datenschutzerklärung / Privacy Policy

• Datenschutz Generator
• Datenschutz.org
• activeMind.AG
• mein-datenschutzbeauftragter

Impressumsgeneratoren (kostenlos)

• eRecht 24
• Jura Forum
• IT-Kanzlei
• 123recht.net