GDPR means the EU General Data Protection Regulation, Regulation (EU) 2016/679;
Personal Data means any information relating to “an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;” (Article 4 § 1.1.of the GDPR), and relates only to personal data, or any part of such personal data, of which [name of business] is the Data Controller or joint Data Controller;
Processing means “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction” Article 4 of the GDPR;
Recipient means “a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not”.
Third party means “a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data”;