¶¶Òõ¶ÌÊÓƵ

The Layered Privacy Notice is a essential document for organizations operating under Dutch jurisdiction that process personal data. It follows a three-tiered approach recommended by privacy regulators, making complex privacy information more accessible to data subjects while ensuring full compliance with GDPR transparency requirements. The document is structured to provide increasingly detailed information across its layers, from a brief overview to comprehensive details about data processing activities. This format is particularly important in the Netherlands, where the Dutch Data Protection Authority (AP) emphasizes the need for clear and accessible privacy information. The document should be updated regularly to reflect changes in processing activities and maintain compliance with evolving data protection requirements.

1. Layer 1 - Brief Overview: Short, clear summary of key privacy information using simple language and icons

2. Layer 2 - Condensed Notice: More detailed but still concise information about data processing activities

3. Layer 3 - Full Privacy Notice: Comprehensive privacy information including all GDPR-required elements

4. Identity and Contact Details: Information about the data controller and DPO contact details

5. Types of Personal Data Processed: Categories of personal data collected and processed

6. Purposes and Legal Bases: Purposes of processing and corresponding legal bases

7. Data Sharing and Recipients: Information about third parties receiving personal data

8. International Transfers: Details about any transfers outside the EEA and safeguards

9. Retention Periods: How long different types of personal data are kept

10. Data Subject Rights: Explanation of individual rights under GDPR

11. Complaint Procedures: How to file complaints and contact supervisory authorities