Data controllers have an obligation, under data protection law, to give information to individuals about how they handle the personal data of those individuals. The aim of this notice is to assist controllers to meet these information requirements with respect to individual subcontractors and controller-appointed freelance workers.
The main provisions of this data protection notice are as follows: (i) a specification the purposes of processing and the legal bases of processing; (ii) details of disclosures of personal data to third parties and international transfers; (iii) personal data retention policies; and (iv) security issues.
The suggested data categories are: system usage information, contact information, transaction information, information in correspondence, information about services provision, and information contained in deliverables.
This document is GDPR-friendly.
