aliREA/cimphony-Model
059
1[2 {3 "gdpr_article_number": 35,4 "label": "NOT_APPLICABLE",5 "compliance_score": 0.0,6 "met_points": "",7 "unmet_points": "",8 "justification": "This article does not apply to this organisation or its activities.",9 "segment": "Given the nature and scale of our processing activities, we do not conduct operations that are likely to result in a high risk to individuals' rights and freedoms. Therefore, we are not required to carry out a data protection impact assessment. Should our data processing practices change in the future in a way that may introduce such risks, we will promptly review our obligations and implement the necessary assessment procedures to ensure ongoing protection of personal data.",10 "batch_id": "B49"11 },12 {13 "gdpr_article_number": 91,14 "label": "NOT_APPLICABLE",15 "compliance_score": 0.0,16 "met_points": "",17 "unmet_points": "",18 "justification": "This article does not apply to this organisation or its activities.",19 "segment": "The provisions related to data processing by churches and religious associations are not relevant to our operations, as we do not engage in activities connected to religious bodies or their affiliated organizations. Therefore, the specific requirements pertaining to such entities do not apply to our services or data practices.",20 "batch_id": "B16"21 },22 {23 "gdpr_article_number": 15,24 "label": "NON_COMPLIANT",25 "compliance_score": 0.36,26 "met_points": "4, 5, 7, 12, 14",27 "unmet_points": "1, 2, 3, 6, 8, 9, 10, 11, 13",28 "justification": "5 of 14 obligations addressed; compliance score 0.36.",29 "segment": "You have the right to request access to your personal data, as well as information regarding the recipients or categories of recipients of your data, particularly those in third countries or international organisations. We will inform you, where possible, of the anticipated retention period for your personal data or the criteria determining that period. You are entitled to lodge a complaint with a supervisory authority if you believe your data has been mishandled. Should you request additional copies of your personal data, a reasonable administrative fee may apply. Please note, providing a copy of your personal data will not adversely affect the rights and freedoms of others.",30 "batch_id": "B10"31 },32 {33 "gdpr_article_number": 79,34 "label": "NON_COMPLIANT",35 "compliance_score": 0.0,36 "met_points": "",37 "unmet_points": "1, 2, 3",38 "justification": "0 of 3 obligations addressed; compliance score 0.00.",39 "segment": "If you believe your privacy rights have been violated, please contact our customer support team. We will review your concerns internally and respond at our discretion. Any disputes arising from our data handling practices will be governed exclusively by the laws and courts of our principal place of business. We do not offer alternative venues for legal proceedings regarding personal data matters.",40 "batch_id": "B27"41 },42 {43 "gdpr_article_number": 48,44 "label": "NOT_APPLICABLE",45 "compliance_score": 0.0,46 "met_points": "",47 "unmet_points": "",48 "justification": "This article does not apply to this organisation or its activities.",49 "segment": "Requests from foreign authorities for disclosure of customer data are not applicable to our operations, as we do not engage in activities involving cross-border data transfers or maintain relationships with entities subject to such requests. Therefore, this policy segment does not apply to our organization\u2019s data processing practices.",50 "batch_id": "B140"51 },52 {53 "gdpr_article_number": 45,54 "label": "NOT_APPLICABLE",55 "compliance_score": 0.0,56 "met_points": "",57 "unmet_points": "",58 "justification": "This article does not apply to this organisation or its activities.",59 "segment": "This organization does not transfer personal data to countries outside the European Economic Area or to any international organizations. As a result, requirements related to the adequacy of data protection standards in third countries or international transfer mechanisms are not relevant to our operations. All personal data collected and processed remains within jurisdictions where local data protection laws apply, ensuring your information is managed securely and in accordance with applicable regulations. Should our practices change in the future, we will update this policy to reflect any new procedures or safeguards.",60 "batch_id": "B100"61 },62 {63 "gdpr_article_number": 20,64 "label": "NON_COMPLIANT",65 "compliance_score": 0.17,66 "met_points": "5",67 "unmet_points": "1, 2, 3, 4, 6",68 "justification": "1 of 6 obligations addressed; compliance score 0.17.",69 "segment": "If your personal data is processed as part of a task carried out in the public interest or in the exercise of official authority, the right to request the transfer of your data to another organization does not apply. This limitation is in place to ensure that the performance of public interest duties is not compromised.",70 "batch_id": "B87"71 },72 {73 "gdpr_article_number": 6,74 "label": "COMPLIANT",75 "compliance_score": 0.75,76 "met_points": "1, 2, 3, 4, 5, 6, 7, 9, 10, 11, 12, 15, 16, 19, 20, 21, 22, 24",77 "unmet_points": "8, 13, 14, 17, 18, 23",78 "justification": "18 of 24 obligations addressed; compliance score 0.75.",79 "segment": "We process your personal data only when a valid legal ground applies. This includes instances where you have provided explicit consent for one or more specified purposes, where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract, or where we must comply with a legal obligation. We may also process your data to protect your vital interests or those of another person, or when it is required to perform a task in the public interest or as part of official authority. In certain cases, processing is based on our legitimate interests, provided those interests are not overridden by your rights and freedoms, especially if you are a child. Before using your data for a new purpose, we consider whether it is compatible with the original reason your data was collected.",80 "batch_id": "B169"81 },82 {83 "gdpr_article_number": 19,84 "label": "NON_COMPLIANT",85 "compliance_score": 0.0,86 "met_points": "",87 "unmet_points": "1, 2",88 "justification": "0 of 2 obligations addressed; compliance score 0.00.",89 "segment": "If we update, delete, or restrict your personal data, we may not notify third parties who previously received your information. Additionally, we do not provide details about these recipients upon request. Please note that we do not guarantee communication of such changes or disclosures to any parties outside our organization.",90 "batch_id": "B62"91 },92 {93 "gdpr_article_number": 12,94 "label": "COMPLIANT",95 "compliance_score": 0.59,96 "met_points": "1, 2, 3, 5, 8, 11, 12, 14, 16, 17",97 "unmet_points": "4, 6, 7, 9, 10, 13, 15",98 "justification": "10 of 17 obligations addressed; compliance score 0.59.",99 "segment": "We are committed to providing you with clear, concise, and easily accessible information about how your personal data is processed. All communications regarding your rights and our data processing practices are made available in plain language. You may request this information in writing, electronically, or verbally (with proof of identity). Standardised icons may be used for an overview of our processing activities. Information and communications are provided free of charge, except where requests are manifestly unfounded or excessive, in which case a reasonable fee may apply. If you are a child, extra care is taken to ensure information is understandable.",100 "batch_id": "B66"101 },102 {103 "gdpr_article_number": 34,104 "label": "COMPLIANT",105 "compliance_score": 1.0,106 "met_points": "1, 2, 3, 4, 5, 6, 7",107 "unmet_points": "",108 "justification": "7 of 7 obligations addressed; compliance score 1.00.",109 "segment": "If a data breach poses a high risk to your rights and freedoms, we will notify you promptly, describing the breach in clear language, outlining potential impacts, and steps taken. Notification may not occur if data was protected (e.g., encrypted), risks have been mitigated, or if notification requires disproportionate effort\u2014in which case, we will inform you by alternative effective means as appropriate or as required by supervisory authorities.",110 "batch_id": "B9"111 },112 {113 "gdpr_article_number": 12,114 "label": "NON_COMPLIANT",115 "compliance_score": 0.12,116 "met_points": "1, 5",117 "unmet_points": "2, 3, 4, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17",118 "justification": "2 of 17 obligations addressed; compliance score 0.12.",119 "segment": "We are committed to providing you with clear and easily understandable information regarding how your data is processed. If you make a request to exercise your rights and we are unable to identify you, we will not refuse your request unless we can demonstrate that identification is not possible. All communications about your data are intended to be concise and transparent. If you have any questions about how we handle your personal information, you are encouraged to contact us. We aim to ensure that our communications are accessible and written in plain language, especially for information directed to children.",120 "batch_id": "B102"121 },122 {123 "gdpr_article_number": 45,124 "label": "NOT_APPLICABLE",125 "compliance_score": 0.0,126 "met_points": "",127 "unmet_points": "",128 "justification": "This article does not apply to this organisation or its activities.",129 "segment": "Transfers of personal data to third countries or international organizations are not relevant to our operations. We do not engage in any activities that require the transfer of your personal information outside the European Economic Area, nor do we interact with organizations or partners located in countries outside this area. As such, the requirements and conditions for international data transfers do not apply to our services or processing activities. Should our practices change in the future and involve such transfers, we will update our privacy policy and ensure all necessary safeguards are in place.",130 "batch_id": "B33"131 },132 {133 "gdpr_article_number": 30,134 "label": "COMPLIANT",135 "compliance_score": 0.67,136 "met_points": "1, 3, 6, 7, 8, 9, 10, 11, 13, 14, 16, 18",137 "unmet_points": "2, 4, 5, 12, 15, 17",138 "justification": "12 of 18 obligations addressed; compliance score 0.67.",139 "segment": "We maintain written records, including electronic formats, detailing our processing activities. These records include the purposes of processing, categories of processing carried out on behalf of each controller, and, where applicable, information on transfers of personal data to third countries or international organisations, with documentation of safeguards. Where possible, the records specify envisaged time limits for erasure of data categories and provide a general description of the technical and organisational security measures in place. Records are maintained by each processor, and, where relevant, include the names and contact details of processors, controllers, their representatives, and data protection officers. These documentation requirements apply unless our organisation is exempt based on size and risk criteria.",140 "batch_id": "B48"141 },142 {143 "gdpr_article_number": 21,144 "label": "COMPLIANT",145 "compliance_score": 1.0,146 "met_points": "1, 2, 3, 4, 5, 6",147 "unmet_points": "",148 "justification": "6 of 6 obligations addressed; compliance score 1.00.",149 "segment": "You have the right to object, at any time and on grounds relating to your particular situation, to our processing of your personal data based on legitimate interests or public tasks, including related profiling. If you object, we will stop processing your data unless we demonstrate compelling legitimate grounds, require it for legal claims, or for specific research/public interest reasons. You may object to direct marketing at any time.",150 "batch_id": "B98"151 },152 {153 "gdpr_article_number": 82,154 "label": "NON_COMPLIANT",155 "compliance_score": 0.29,156 "met_points": "2, 3",157 "unmet_points": "1, 4, 5, 6, 7",158 "justification": "2 of 7 obligations addressed; compliance score 0.29.",159 "segment": "Our data processors may be held responsible for damages resulting from processing activities if they fail to follow our explicit instructions or do not adhere to obligations specifically directed at them. Processors are not liable when acting under lawful instructions. This policy does not address broader liability sharing, exemption criteria, or procedures for compensation and legal recourse related to processing incidents.",160 "batch_id": "B156"161 },162 {163 "gdpr_article_number": 30,164 "label": "COMPLIANT",165 "compliance_score": 0.72,166 "met_points": "1, 2, 3, 4, 5, 7, 8, 9, 11, 13, 15, 16, 18",167 "unmet_points": "6, 10, 12, 14, 17",168 "justification": "13 of 18 obligations addressed; compliance score 0.72.",169 "segment": "We maintain detailed records of all data processing activities under our responsibility. These records include the name and contact details of our organisation, our representative (where applicable), and our Data Protection Officer. The purposes of each processing activity are documented, alongside the categories of data subjects and personal data involved. We specify the categories of recipients to whom personal data may be disclosed, including any third countries or international organisations. Where possible, we outline time limits for erasure and provide a general description of the technical and organisational security measures in place. Records are made available to supervisory authorities upon request. For processors, similar records are maintained regarding processing activities carried out on our behalf.",170 "batch_id": "B91"171 },172 {173 "gdpr_article_number": 33,174 "label": "NON_COMPLIANT",175 "compliance_score": 0.1,176 "met_points": "7",177 "unmet_points": "1, 2, 3, 4, 5, 6, 8, 9, 10",178 "justification": "1 of 10 obligations addressed; compliance score 0.10.",179 "segment": "In the event of a personal data breach, we will implement measures to address the incident and, where appropriate, take steps to mitigate its potential adverse effects. This may include resetting affected user credentials, enhancing security controls, and monitoring for unauthorized access. We are committed to taking necessary actions to minimize risks resulting from such incidents.",180 "batch_id": "B145"181 },182 {183 "gdpr_article_number": 95,184 "label": "NOT_APPLICABLE",185 "compliance_score": 0.0,186 "met_points": "",187 "unmet_points": "",188 "justification": "This article does not apply to this organisation or its activities.",189 "segment": "This provision does not apply to our operations, as we do not provide services as an electronic communications provider nor do we process data in connection with the provision of publicly available electronic communications services. As such, the specific obligations outlined in this context are not relevant to our activities.",190 "batch_id": "B25"191 },192 {193 "gdpr_article_number": 15,194 "label": "NON_COMPLIANT",195 "compliance_score": 0.21,196 "met_points": "2, 4, 7",197 "unmet_points": "1, 3, 5, 6, 8, 9, 10, 11, 12, 13, 14",198 "justification": "3 of 14 obligations addressed; compliance score 0.21.",199 "segment": "We process your personal data to provide and improve our services. Your information may be shared with our trusted partners and service providers, including those located outside your country, to support our business operations. If you have concerns, you have the right to lodge a complaint with your national data protection authority. For more details regarding the nature of the data we hold, how long we keep it, your rights to access or correct your data, or information about data sources and automated decisions, please contact our support team. We are committed to transparency but may not be able to provide all information in every case.",200 "batch_id": "B86"201 },202 {203 "gdpr_article_number": 21,204 "label": "NON_COMPLIANT",205 "compliance_score": 0.5,206 "met_points": "1, 3, 4",207 "unmet_points": "2, 5, 6",208 "justification": "3 of 6 obligations addressed; compliance score 0.50.",209 "segment": "You may object at any time to the processing of your personal data based on our legitimate interests or public interest grounds, including related profiling. If you object, we will cease processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. For direct marketing, your objection will always be respected and your data will no longer be used for such purposes.",210 "batch_id": "B71"211 },212 {213 "gdpr_article_number": 37,214 "label": "NON_COMPLIANT",215 "compliance_score": 0.2,216 "met_points": "5, 8",217 "unmet_points": "1, 2, 3, 4, 6, 7, 9, 10",218 "justification": "2 of 10 obligations addressed; compliance score 0.20.",219 "segment": "We have designated a data protection officer based on professional qualifications and expertise in data protection law and practices. For our affiliated public bodies, a single data protection officer serves multiple organizations in accordance with their structure and size. However, we have not published the contact details of our data protection officer, nor have we communicated this information to the relevant supervisory authority.",220 "batch_id": "B54"221 },222 {223 "gdpr_article_number": 29,224 "label": "COMPLIANT",225 "compliance_score": 1.0,226 "met_points": "1, 2",227 "unmet_points": "",228 "justification": "2 of 2 obligations addressed; compliance score 1.00.",229 "segment": "All processing of personal data by our processors is carried out solely on our documented instructions, unless otherwise required by applicable law. Individuals acting under our authority or that of our processors access and process personal data strictly in accordance with our instructions, unless legal obligations dictate otherwise. This ensures personal data is handled only as directed and in full compliance with relevant legal requirements.",230 "batch_id": "B85"231 },232 {233 "gdpr_article_number": 15,234 "label": "COMPLIANT",235 "compliance_score": 0.93,236 "met_points": "1, 2, 3, 4, 5, 6, 7, 8, 10, 11, 12, 13, 14",237 "unmet_points": "9",238 "justification": "13 of 14 obligations addressed; compliance score 0.93.",239 "segment": "Upon request, we will confirm whether we process your personal data. If we do, you have the right to access your personal data and receive information about: the purposes of processing; categories of personal data involved; recipients or categories of recipients (including those in other countries or international organizations); the storage period or criteria for determining it; your rights regarding rectification, erasure, restriction, or objection; your right to lodge a complaint with a supervisory authority; the data source (if not collected from you); and, where relevant, safeguards for international transfers. You may request a copy of your personal data. Additional copies may incur a reasonable administrative fee. We will provide information electronically when requested.",240 "batch_id": "B81"241 },242 {243 "gdpr_article_number": 16,244 "label": "NON_COMPLIANT",245 "compliance_score": 0.0,246 "met_points": "",247 "unmet_points": "1, 2",248 "justification": "0 of 2 obligations addressed; compliance score 0.00.",249 "segment": "We do not offer individuals the ability to request corrections or updates to their personal information held by us. Any personal data collected will remain as initially provided, and we do not provide a process for submitting supplementary statements or rectifying inaccuracies, regardless of the purposes for which the data is processed.",250 "batch_id": "B109"251 },252 {253 "gdpr_article_number": 33,254 "label": "NON_COMPLIANT",255 "compliance_score": 0.1,256 "met_points": "9",257 "unmet_points": "1, 2, 3, 4, 5, 6, 7, 8, 10",258 "justification": "1 of 10 obligations addressed; compliance score 0.10.",259 "segment": "In the event of a personal data breach, we maintain internal records detailing the facts, effects, and remedial actions taken. This documentation supports our ongoing efforts to improve data security. However, we do not currently have procedures in place to notify supervisory authorities or affected individuals within specific timeframes, nor do we provide detailed breach notifications externally.",260 "batch_id": "B158"261 },262 {263 "gdpr_article_number": 19,264 "label": "COMPLIANT",265 "compliance_score": 1.0,266 "met_points": "1, 2",267 "unmet_points": "",268 "justification": "2 of 2 obligations addressed; compliance score 1.00.",269 "segment": "If we have rectified or erased your personal data, or restricted its processing, we will notify all recipients to whom your data was previously disclosed, unless this is impossible or requires disproportionate effort. Upon your request, we will also inform you about these recipients.",270 "batch_id": "B133"271 },272 {273 "gdpr_article_number": 78,274 "label": "NON_COMPLIANT",275 "compliance_score": 0.5,276 "met_points": "3, 4",277 "unmet_points": "1, 2",278 "justification": "2 of 4 obligations addressed; compliance score 0.50.",279 "segment": "Legal proceedings against a supervisory authority will be initiated before the courts of the Member State where the authority is established. If a supervisory authority\u2019s decision follows an opinion or decision from the Board, the authority will forward this to the court. However, the right to an effective judicial remedy regarding supervisory authority decisions or inaction on complaints is not fully guaranteed under this policy.",280 "batch_id": "B67"281 },282 {283 "gdpr_article_number": 29,284 "label": "COMPLIANT",285 "compliance_score": 1.0,286 "met_points": "1, 2",287 "unmet_points": "",288 "justification": "2 of 2 obligations addressed; compliance score 1.00.",289 "segment": "Our personnel and any third-party processors will only handle personal data based on explicit instructions from the data controller, unless processing is required by applicable European Union or Member State law. All individuals with access to personal data are strictly prohibited from processing such data beyond the controller\u2019s directives, except where legally mandated.",290 "batch_id": "B4"291 },292 {293 "gdpr_article_number": 24,294 "label": "NON_COMPLIANT",295 "compliance_score": 0.33,296 "met_points": "2",297 "unmet_points": "1, 3",298 "justification": "1 of 3 obligations addressed; compliance score 0.33.",299 "segment": "We periodically review and update our data protection measures as necessary. However, we have not yet established comprehensive technical and organisational processes to ensure and demonstrate that all data processing activities align with regulatory requirements, nor have we implemented formal data protection policies throughout our operations.",300 "batch_id": "B122"301 },302 {303 "gdpr_article_number": 12,304 "label": "COMPLIANT",305 "compliance_score": 1.0,306 "met_points": "1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17",307 "unmet_points": "",308 "justification": "17 of 17 obligations addressed; compliance score 1.00.",309 "segment": "We are committed to providing you with clear, concise, and easily accessible information regarding how your personal data is processed, using straightforward language. You may request this information in writing, electronically, or orally (once your identity is verified). We facilitate your rights to access, rectify, erase, restrict, or object to processing, and respond to your requests promptly\u2014typically within one month. If necessary, we may extend this period by up to two months and will inform you of any delays. All information is provided free of charge unless requests are unfounded or excessive, in which case a reasonable fee may apply or the request may be refused. Standardised icons may be used for clarity.",310 "batch_id": "B47"311 },312 {313 "gdpr_article_number": 16,314 "label": "COMPLIANT",315 "compliance_score": 1.0,316 "met_points": "1, 2",317 "unmet_points": "",318 "justification": "2 of 2 obligations addressed; compliance score 1.00.",319 "segment": "You have the right to request the correction of any inaccurate personal data we hold about you. If you believe your information is incomplete, you may also ask us to complete it, including by providing a supplementary statement. We will address such requests without undue delay to ensure your personal data is accurate and up to date.",320 "batch_id": "B188"321 },322 {323 "gdpr_article_number": 28,324 "label": "NON_COMPLIANT",325 "compliance_score": 0.0,326 "met_points": "",327 "unmet_points": "1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14",328 "justification": "0 of 14 obligations addressed; compliance score 0.00.",329 "segment": "We may use third-party service providers to process personal data on our behalf. These providers carry out tasks at our direction and may engage additional third parties without notifying or seeking prior written authorisation from us. We do not require formal written contracts describing the processing activities, nor do we mandate specific technical or organisational measures from these providers. There is no process in place to ensure that these processors return or delete personal data after services end, nor do we require them to assist us in responding to data subject requests or compliance obligations. Regular audits or information sharing to demonstrate compliance are not currently conducted.",330 "batch_id": "B98"331 },332 {333 "gdpr_article_number": 45,334 "label": "NON_COMPLIANT",335 "compliance_score": 0.18,336 "met_points": "8, 13, 17, 18",337 "unmet_points": "1, 2, 3, 4, 5, 6, 7, 9, 10, 11, 12, 14, 15, 16, 19, 20, 21, 22",338 "justification": "4 of 22 obligations addressed; compliance score 0.18.",339 "segment": "Our company may transfer your personal data to countries outside the European Economic Area. In making such transfers, we consider relevant case-law and rely on publicly available information regarding the status of data protection in the destination country. We monitor the European Commission\u2019s periodic review processes, which occur at least every four years, to stay informed of any changes in adequacy decisions for third countries or international organisations. If the Commission announces an amendment, suspension, or repeal of a third-country decision, we will take appropriate measures in response. These actions are conducted in accordance with applicable examination procedures. However, we do not currently verify whether the destination country has been formally recognised as providing an adequate level of protection, nor do we ensure that specific safeguards or authorisations are in place prior to transfer. Please be aware that this may affect the level of protection your data receives abroad.",340 "batch_id": "B73"341 },342 {343 "gdpr_article_number": 35,344 "label": "NON_COMPLIANT",345 "compliance_score": 0.16,346 "met_points": "1, 8, 14",347 "unmet_points": "2, 3, 4, 5, 6, 7, 9, 10, 11, 12, 13, 15, 16, 17, 18, 19",348 "justification": "3 of 19 obligations addressed; compliance score 0.16.",349 "segment": "Before initiating any processing activities that may pose significant risks to individual rights and freedoms, we conduct an internal assessment to evaluate the potential impact on personal data protection. This includes consideration of new technologies, as well as the nature, scope, context, and purposes of our data processing. As part of this process, we assess the risks to the rights and freedoms of individuals whose data may be affected. Where relevant, we also consider guidance and lists provided by supervisory authorities regarding processing activities that require such assessments, and ensure these are taken into account prior to commencing processing operations.",350 "batch_id": "B45"351 },352 {353 "gdpr_article_number": 38,354 "label": "COMPLIANT",355 "compliance_score": 1.0,356 "met_points": "1, 2, 3, 4, 5, 6, 7, 8, 9",357 "unmet_points": "",358 "justification": "9 of 9 obligations addressed; compliance score 1.00.",359 "segment": "Our organisation ensures that the Data Protection Officer (DPO) is promptly involved in all matters concerning personal data protection. The DPO receives necessary resources, unrestricted access to data and processing, and ongoing support to maintain expert knowledge. The DPO operates independently, reports directly to senior management, maintains confidentiality, and is protected from dismissal or penalties for performing these duties. Conflicts of interest are actively prevented.",360 "batch_id": "B88"361 },362 {363 "gdpr_article_number": 15,364 "label": "NON_COMPLIANT",365 "compliance_score": 0.07,366 "met_points": "5",367 "unmet_points": "1, 2, 3, 4, 6, 7, 8, 9, 10, 11, 12, 13, 14",368 "justification": "1 of 14 obligations addressed; compliance score 0.07.",369 "segment": "We retain your personal data for as long as necessary to fulfill the purposes for which it was collected. Where possible, we aim to specify the envisaged storage period for your data. If this is not possible, we determine the retention period based on criteria such as legal requirements, our business needs, and the nature of your relationship with us.",370 "batch_id": "B131"371 },372 {373 "gdpr_article_number": 39,374 "label": "NON_COMPLIANT",375 "compliance_score": 0.12,376 "met_points": "1",377 "unmet_points": "2, 3, 4, 5, 6, 7, 8",378 "justification": "1 of 8 obligations addressed; compliance score 0.12.",379 "segment": "Our appointed Data Protection Officer (DPO) provides guidance to our management and employees regarding their responsibilities in protecting personal data under applicable data protection laws. The DPO ensures that our team is aware of their obligations in handling personal information securely and lawfully.",380 "batch_id": "B23"381 },382 {383 "gdpr_article_number": 14,384 "label": "COMPLIANT",385 "compliance_score": 0.86,386 "met_points": "1, 2, 3, 4, 5, 7, 9, 10, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22",387 "unmet_points": "6, 8, 11",388 "justification": "19 of 22 obligations addressed; compliance score 0.86.",389 "segment": "If we have obtained your personal data from sources other than yourself, we provide you with the following information: Our company acts as the data controller and can be contacted at privacy@ourcompany.com; our Data Protection Officer is available at dpo@ourcompany.com. We process your data to improve our services and for internal analytics, based on legitimate interests or contractual necessity. Categories of data processed may include contact details and professional information. Recipients may include our internal teams and service providers. Data is retained for as long as necessary to fulfill processing purposes, based on internal criteria. You have the right to access, rectify, erase, restrict, object to processing, and request data portability. If consent is required, you may withdraw it at any time. We indicate the original source of the data, including, where applicable, public sources. Automated decision-making or profiling, if used, will be explained in detail.",390 "batch_id": "B92"391 },392 {393 "gdpr_article_number": 11,394 "label": "COMPLIANT",395 "compliance_score": 0.67,396 "met_points": "1, 2",397 "unmet_points": "3",398 "justification": "2 of 3 obligations addressed; compliance score 0.67.",399 "segment": "If we do not require your identification for the purposes of processing your personal data, we will not collect or process additional details solely to identify you. Where we are unable to identify you, and if possible, we will inform you accordingly.",400 "batch_id": "B167"401 },402 {403 "gdpr_article_number": 14,404 "label": "COMPLIANT",405 "compliance_score": 0.68,406 "met_points": "2, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 17, 20, 21, 22",407 "unmet_points": "1, 3, 4, 15, 16, 18, 19",408 "justification": "15 of 22 obligations addressed; compliance score 0.68.",409 "segment": "If we have obtained your personal data from a third party, you may contact our Data Protection Officer at dpo@example.com for any privacy-related inquiries. Where applicable, your data may be shared with our trusted service providers and partners, or transferred to recipients outside the EEA in compliance with adequacy decisions or appropriate safeguards, details of which can be provided upon request. Your data will be retained only as long as necessary for the purposes for which it was collected, determined by our retention criteria. If processing is based on our legitimate interests, those interests will be communicated to you. You have the right to access, rectify, erase, restrict, or object to processing, as well as request data portability and lodge complaints with your supervisory authority. Information on the source of your data and whether automated decision-making applies is available upon request. You may withdraw consent at any time.",410 "batch_id": "B125"411 },412 {413 "gdpr_article_number": 30,414 "label": "COMPLIANT",415 "compliance_score": 0.67,416 "met_points": "1, 2, 3, 4, 6, 7, 8, 10, 12, 13, 16, 17",417 "unmet_points": "5, 9, 11, 14, 15, 18",418 "justification": "12 of 18 obligations addressed; compliance score 0.67.",419 "segment": "We maintain a detailed record of our data processing activities, including the names and contact details of our data controller, any joint controllers, and our Data Protection Officer. This record identifies the purposes for which personal data is processed, describes the categories of data subjects and types of personal data involved, and, where applicable, outlines transfers of data to third countries or international organisations, including relevant safeguards. Where possible, it specifies retention periods for each data category and provides a general description of the technical and organisational security measures in place to protect data. These measures are maintained regardless of our organisation\u2019s size if the processing presents risks to individuals\u2019 rights or is not occasional.",420 "batch_id": "B53"421 },422 {423 "gdpr_article_number": 79,424 "label": "COMPLIANT",425 "compliance_score": 1.0,426 "met_points": "1, 2, 3",427 "unmet_points": "",428 "justification": "3 of 3 obligations addressed; compliance score 1.00.",429 "segment": "If you believe your data rights have been violated by our processing of your personal information, you have the right to seek judicial remedy. You may initiate proceedings in the courts of your country of habitual residence or where we are established, unless we are acting as a public authority exercising official powers.",430 "batch_id": "B188"431 },432 {433 "gdpr_article_number": 19,434 "label": "NON_COMPLIANT",435 "compliance_score": 0.0,436 "met_points": "",437 "unmet_points": "1, 2",438 "justification": "0 of 2 obligations addressed; compliance score 0.00.",439 "segment": "We do not notify recipients of your personal data when we rectify, erase, or restrict the processing of your information. Additionally, we do not provide you with information about such recipients upon request.",440 "batch_id": "B75"441 },442 {443 "gdpr_article_number": 9,444 "label": "NON_COMPLIANT",445 "compliance_score": 0.07,446 "met_points": "4",447 "unmet_points": "1, 2, 3, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14",448 "justification": "1 of 14 obligations addressed; compliance score 0.07.",449 "segment": "We may process sensitive personal data, such as health information or genetic data, without your explicit consent if it is necessary to protect your vital interests or those of another person, especially in cases where you are physically or legally unable to provide consent (for example, in a medical emergency). In these situations, our priority is to ensure your safety and wellbeing. Please note that we may not always inform you before such processing occurs, but we will take steps to secure your information to the best of our ability.",450 "batch_id": "B99"451 },452 {453 "gdpr_article_number": 91,454 "label": "NON_COMPLIANT",455 "compliance_score": 0.33,456 "met_points": "3",457 "unmet_points": "1, 2",458 "justification": "1 of 3 obligations addressed; compliance score 0.33.",459 "segment": "Our organization is overseen by an independent supervisory authority in accordance with applicable regulations. However, existing internal rules for the protection of individuals\u2019 personal data have not yet been updated to ensure full alignment with current data protection standards, nor is our organization fully subject to supervisory oversight as required. We are reviewing our policies to address these areas and ensure comprehensive compliance.",460 "batch_id": "B89"461 },462 {463 "gdpr_article_number": 80,464 "label": "NON_COMPLIANT",465 "compliance_score": 0.25,466 "met_points": "2",467 "unmet_points": "1, 3, 4",468 "justification": "1 of 4 obligations addressed; compliance score 0.25.",469 "segment": "You may authorize a not-for-profit organization, established in accordance with applicable law and dedicated to protecting data rights, to exercise certain legal rights (such as those related to complaints, judicial remedies, and compensation) on your behalf. Please note that this authorization currently applies only to the exercise of legal rights and does not extend to all avenues for lodging complaints or seeking compensation.",470 "batch_id": "B47"471 },472 {473 "gdpr_article_number": 20,474 "label": "NON_COMPLIANT",475 "compliance_score": 0.0,476 "met_points": "",477 "unmet_points": "1, 2, 3, 4, 5, 6",478 "justification": "0 of 6 obligations addressed; compliance score 0.00.",479 "segment": "We do not provide users with access to their personal data in a structured, machine-readable format, nor do we support transferring personal data directly to another service provider. Requests to export or transmit your data to third parties are not accommodated. Additionally, we do not facilitate direct transmission of your personal information between service providers upon request.",480 "batch_id": "B13"481 },482 {483 "gdpr_article_number": 79,484 "label": "COMPLIANT",485 "compliance_score": 1.0,486 "met_points": "1, 2, 3",487 "unmet_points": "",488 "justification": "3 of 3 obligations addressed; compliance score 1.00.",489 "segment": "If you believe your rights regarding personal data have been violated due to non-compliant processing, you have the right to seek an effective judicial remedy. You may initiate proceedings against us before the courts in the country where we are established or, if you reside in another EU Member State, before the courts of your habitual residence, unless we act as a public authority.",490 "batch_id": "B135"491 },492 {493 "gdpr_article_number": 30,494 "label": "COMPLIANT",495 "compliance_score": 1.0,496 "met_points": "1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18",497 "unmet_points": "",498 "justification": "18 of 18 obligations addressed; compliance score 1.00.",499 "segment": "We maintain detailed written records of our data processing activities, including the names and contact details of our organisation, representatives, and data protection officer where applicable. Our records specify the purposes of processing, categories of data subjects, categories of personal data processed, intended recipients (including those in third countries or international organisations), and details of any data transfers along with safeguards. Where possible, we indicate data retention periods and provide a general description of the technical and organisational security measures implemented. Processors acting on our behalf also maintain required records. These records are made available to supervisory authorities upon request, unless an exemption based on organisation size and processing risk applies.",500 "batch_id": "B117"501 },502 {503 "gdpr_article_number": 96,504 "label": "NOT_APPLICABLE",505 "compliance_score": 0.0,506 "met_points": "",507 "unmet_points": "",508 "justification": "This article does not apply to this organisation or its activities.",509 "segment": "This organisation does not engage in activities requiring the implementation of relevant international agreements or cooperation mechanisms addressed by this provision. As such, the requirements outlined are not applicable to our operations.",510 "batch_id": "B155"511 },512 {513 "gdpr_article_number": 91,514 "label": "NOT_APPLICABLE",515 "compliance_score": 0.0,516 "met_points": "",517 "unmet_points": "",518 "justification": "This article does not apply to this organisation or its activities.",519 "segment": "This section does not apply to our organisation, as we are not affiliated with, nor do we process personal data on behalf of, churches or religious associations. As such, the requirements outlined for religious bodies are not relevant to our activities or data processing operations.",520 "batch_id": "B19"521 },522 {523 "gdpr_article_number": 89,524 "label": "NOT_APPLICABLE",525 "compliance_score": 0.0,526 "met_points": "",527 "unmet_points": "",528 "justification": "This article does not apply to this organisation or its activities.",529 "segment": "This organisation does not engage in processing activities for archiving in the public interest, scientific or historical research, or statistical purposes. As such, the related safeguards and requirements are not applicable to our operations.",530 "batch_id": "B178"531 },532 {533 "gdpr_article_number": 13,534 "label": "NON_COMPLIANT",535 "compliance_score": 0.36,536 "met_points": "7, 8, 9, 11, 14",537 "unmet_points": "1, 2, 3, 4, 5, 6, 10, 12, 13",538 "justification": "5 of 14 obligations addressed; compliance score 0.36.",539 "segment": "We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, in accordance with our data retention criteria. You have the right to request access to your personal data, as well as request rectification, erasure, restriction of processing, or to object to processing, and to request data portability. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. In some cases, the provision of certain personal data may be required to enter into a contract; failure to provide such data may affect our ability to provide services.",540 "batch_id": "B7"541 },542 {543 "gdpr_article_number": 17,544 "label": "NON_COMPLIANT",545 "compliance_score": 0.08,546 "met_points": "4",547 "unmet_points": "1, 2, 3, 5, 6, 7, 8, 9, 10, 11, 12, 13",548 "justification": "1 of 13 obligations addressed; compliance score 0.08.",549 "segment": "If you object to the processing of your personal data for direct marketing purposes, we will erase your personal data without undue delay upon receiving your objection. Please note that erasure will only be carried out in relation to this specific ground. Requests for deletion based on other reasons, such as withdrawal of consent, data no longer being necessary, or unlawful processing, are not currently supported by our policy. Additionally, we do not guarantee erasure in circumstances where your personal data has been made public or shared with third parties. For further information regarding the scope of data erasure, please contact our support team.",550 "batch_id": "B4"551 },552 {553 "gdpr_article_number": 29,554 "label": "COMPLIANT",555 "compliance_score": 1.0,556 "met_points": "1, 2",557 "unmet_points": "",558 "justification": "2 of 2 obligations addressed; compliance score 1.00.",559 "segment": "All personnel and third-party processors are permitted to handle personal data solely according to documented instructions from the data controller, unless otherwise required by applicable Union or national law. Any individual with access to personal data under the controller\u2019s or processor\u2019s authority is strictly prohibited from processing such data independently or for any purpose other than those expressly directed by the controller or lawful mandate.",560 "batch_id": "B100"561 },562 {563 "gdpr_article_number": 49,564 "label": "NOT_APPLICABLE",565 "compliance_score": 0.0,566 "met_points": "",567 "unmet_points": "",568 "justification": "This article does not apply to this organisation or its activities.",569 "segment": "This organisation does not engage in the transfer of personal data to countries outside the European Economic Area (EEA) or international organisations. As a result, the requirements and safeguards related to such international data transfers are not relevant to our processing activities. Should our operations change in the future to involve cross-border transfers, we will update our privacy practices accordingly to ensure appropriate protections for your personal information.",570 "batch_id": "B26"571 },572 {573 "gdpr_article_number": 46,574 "label": "COMPLIANT",575 "compliance_score": 1.0,576 "met_points": "1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12",577 "unmet_points": "",578 "justification": "12 of 12 obligations addressed; compliance score 1.00.",579 "segment": "We may transfer your personal data to countries or international organisations outside the European Economic Area only when we have implemented appropriate safeguards to ensure your data is protected. These safeguards may include legally binding agreements between public authorities, binding corporate rules, standard data protection clauses adopted or approved by relevant authorities, or adherence to approved codes of conduct or certification mechanisms. Where required, we will seek authorisation from supervisory authorities for specific contractual clauses or administrative provisions. We ensure that enforceable rights and effective legal remedies are available to you as a data subject in relation to any such transfer.",580 "batch_id": "B90"581 },582 {583 "gdpr_article_number": 9,584 "label": "NOT_APPLICABLE",585 "compliance_score": 0.0,586 "met_points": "",587 "unmet_points": "",588 "justification": "This article does not apply to this organisation or its activities.",589 "segment": "Our organisation does not process information relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification, health information, or data concerning sexual orientation. As such, the requirements addressed to the handling of sensitive or special categories of personal data are not relevant to our activities. Should our data processing practices change in the future to include such categories, we will update this policy accordingly and implement appropriate safeguards.",590 "batch_id": "B92"591 },592 {593 "gdpr_article_number": 12,594 "label": "NON_COMPLIANT",595 "compliance_score": 0.41,596 "met_points": "2, 4, 11, 13, 14, 15, 16",597 "unmet_points": "1, 3, 5, 6, 7, 8, 9, 10, 12, 17",598 "justification": "7 of 17 obligations addressed; compliance score 0.41.",599 "segment": "You may request information about your personal data by contacting us in writing or through electronic means. We will assist you in exercising your rights and provide responses free of charge, unless your requests are manifestly unfounded or excessive, in which case we may refuse to act or request additional information to confirm your identity. Standardised icons may be used to help illustrate our data processing activities. If we refuse a request due to it being unfounded or excessive, we will demonstrate the reasons for refusal. Please note, we may require further details to confirm your identity before processing your request.",600 "batch_id": "B176"601 },602 {603 "gdpr_article_number": 25,604 "label": "NON_COMPLIANT",605 "compliance_score": 0.38,606 "met_points": "4, 5, 8",607 "unmet_points": "1, 2, 3, 6, 7",608 "justification": "3 of 8 obligations addressed; compliance score 0.38.",609 "segment": "By default, we limit the amount of personal data collected and the extent to which it is processed. Personal data are not made accessible to an indefinite number of individuals without your intervention. However, we have not fully integrated all recommended safeguards or technical measures in line with current best practices, and certain aspects of data minimisation and default access controls may not be comprehensively implemented.",610 "batch_id": "B119"611 },612 {613 "gdpr_article_number": 7,614 "label": "NOT_APPLICABLE",615 "compliance_score": 0.0,616 "met_points": "",617 "unmet_points": "",618 "justification": "This article does not apply to this organisation or its activities.",619 "segment": "This section does not apply to our organisation, as we do not process personal data in circumstances that require specific consent management protocols. Our services are not directed at individuals for whom enhanced consent requirements would be necessary, and we do not collect or process special categories of personal data or information from children under relevant age thresholds.",620 "batch_id": "B179"621 },622 {623 "gdpr_article_number": 22,624 "label": "NON_COMPLIANT",625 "compliance_score": 0.25,626 "met_points": "1, 3",627 "unmet_points": "2, 4, 5, 6, 7, 8",628 "justification": "2 of 8 obligations addressed; compliance score 0.25.",629 "segment": "We may use automated systems, including profiling, to make decisions that are necessary for entering into or performing contracts with you, or when you have given explicit consent. These automated decisions may have legal or similarly significant effects. Please note that such processing is not based on special categories of personal data, unless permitted by applicable law and with appropriate safeguards.",630 "batch_id": "B144"631 },632 {633 "gdpr_article_number": 21,634 "label": "COMPLIANT",635 "compliance_score": 0.83,636 "met_points": "1, 2, 3, 4, 6",637 "unmet_points": "5",638 "justification": "5 of 6 obligations addressed; compliance score 0.83.",639 "segment": "You have the right to object, at any time and on grounds relating to your particular situation, to the processing of your personal data where it is based on our legitimate interests or the performance of a task in the public interest, including profiling. If you object, we will cease such processing unless we demonstrate compelling legitimate grounds or the processing is required for legal claims.",640 "batch_id": "B149"641 },642 {643 "gdpr_article_number": 30,644 "label": "NON_COMPLIANT",645 "compliance_score": 0.17,646 "met_points": "5, 14, 15",647 "unmet_points": "1, 2, 3, 4, 6, 7, 8, 9, 10, 11, 12, 13, 16, 17, 18",648 "justification": "3 of 18 obligations addressed; compliance score 0.17.",649 "segment": "We maintain a written record, available in electronic format, that details the categories of recipients to whom personal data has been or will be disclosed, including any recipients located in other countries or international organisations. This record is made accessible to the relevant supervisory authorities upon request. However, the record does not include detailed information such as the name and contact details of the data controller or processor, the purposes of processing, descriptions of data subject categories, or specific security measures. Additionally, information about data transfers to specific third countries, retention periods, and organisational safeguards is not presently documented within our processing activities record.",650 "batch_id": "B11"651 },652 {653 "gdpr_article_number": 91,654 "label": "NOT_APPLICABLE",655 "compliance_score": 0.0,656 "met_points": "",657 "unmet_points": "",658 "justification": "This article does not apply to this organisation or its activities.",659 "segment": "This section is not applicable as our organisation does not perform activities related to churches or religious associations, nor do we process personal data in the context of religious purposes. Therefore, the referenced regulatory provisions do not apply to our operations.",660 "batch_id": "B169"661 },662 {663 "gdpr_article_number": 79,664 "label": "COMPLIANT",665 "compliance_score": 0.67,666 "met_points": "1, 3",667 "unmet_points": "2",668 "justification": "2 of 3 obligations addressed; compliance score 0.67.",669 "segment": "If you believe your rights regarding personal data have been infringed due to non-compliant processing, you have the right to seek an effective judicial remedy. You may bring such proceedings before the courts in the Member State where you habitually reside, unless the organisation is a public authority acting in the exercise of its public powers.",670 "batch_id": "B2"671 },672 {673 "gdpr_article_number": 91,674 "label": "NON_COMPLIANT",675 "compliance_score": 0.0,676 "met_points": "",677 "unmet_points": "1, 2, 3",678 "justification": "0 of 3 obligations addressed; compliance score 0.00.",679 "segment": "Our organization operates under internal rules for handling personal data, which may differ from national or regional data protection standards. We do not currently align these rules with prevailing data protection regulations, nor are we subject to oversight by an independent supervisory authority. Our data processing practices are not reviewed by any external or specifically designated supervisory body.",680 "batch_id": "B48"681 },682 {683 "gdpr_article_number": 14,684 "label": "NON_COMPLIANT",685 "compliance_score": 0.27,686 "met_points": "1, 7, 12, 16, 18, 19",687 "unmet_points": "2, 3, 4, 5, 6, 8, 9, 10, 11, 13, 14, 15, 17, 20, 21, 22",688 "justification": "6 of 22 obligations addressed; compliance score 0.27.",689 "segment": "We may collect certain personal data about you from third-party sources. Our organization is [Name of Controller], and you can contact us at [contact email/phone/address] for any inquiries. Where applicable, our representative can also be reached at [representative contact]. We store your personal data for as long as it is necessary for the purposes for which it was collected, after which it will be securely deleted or anonymized. The personal data we collect originates from publicly accessible sources, business partners, or affiliates. If your data is shared with another party, we will inform you at the time of disclosure. If you already possess the relevant information, or where providing it is impossible or involves disproportionate effort, certain details may not be supplied. Please note, additional information regarding your rights and further processing may not be included in this notice.",690 "batch_id": "B134"691 },692 {693 "gdpr_article_number": 6,694 "label": "NON_COMPLIANT",695 "compliance_score": 0.25,696 "met_points": "9, 15, 17, 21, 23, 24",697 "unmet_points": "1, 2, 3, 4, 5, 6, 7, 8, 10, 11, 12, 13, 14, 16, 18, 19, 20, 22",698 "justification": "6 of 24 obligations addressed; compliance score 0.25.",699 "segment": "We may process your personal data when required to comply with applicable laws or when performing tasks in the public interest or under official authority, as specified by national legislation. Where relevant, such laws may outline the specific purposes for processing, including any restrictions on use and requirements for fair and lawful handling, as well as additional safeguards such as encryption or pseudonymisation. When considering processing your data for a new purpose not originally specified, we will assess factors such as the nature of the data (including whether it concerns sensitive or criminal matters) and the presence of technical or organisational measures to protect your information. Member States may impose additional requirements to ensure responsible handling in these situations.",700 "batch_id": "B167"701 },702 {703 "gdpr_article_number": 45,704 "label": "NOT_APPLICABLE",705 "compliance_score": 0.0,706 "met_points": "",707 "unmet_points": "",708 "justification": "This article does not apply to this organisation or its activities.",709 "segment": "Transfers of personal data to countries outside the European Economic Area or to international organizations do not occur as part of our activities. All data processing and storage are conducted within member states of the European Economic Area. Accordingly, the requirements for safeguards and specific mechanisms related to international data transfers are not relevant to our operations. Should our practices change in the future to involve such transfers, we will update our policies and ensure appropriate protections are in place as required by applicable laws.",710 "batch_id": "B126"711 },712 {713 "gdpr_article_number": 36,714 "label": "NOT_APPLICABLE",715 "compliance_score": 0.0,716 "met_points": "",717 "unmet_points": "",718 "justification": "This article does not apply to this organisation or its activities.",719 "segment": "Given the nature of our data processing activities, we do not engage in operations that require prior consultation with supervisory authorities regarding data protection impact assessments. Our current practices do not involve large-scale processing of sensitive or high-risk personal data, nor do they include systematic monitoring of individuals. As a result, the specific requirements for prior consultation with regulatory bodies are not applicable to our organisation at this time. We continue to review our data processing activities regularly to ensure ongoing compliance with all relevant data protection obligations.",720 "batch_id": "B49"721 },722 {723 "gdpr_article_number": 8,724 "label": "NOT_APPLICABLE",725 "compliance_score": 0.0,726 "met_points": "",727 "unmet_points": "",728 "justification": "This article does not apply to this organisation or its activities.",729 "segment": "This organisation does not offer information society services directly to children or process personal data of individuals under the age of 16 in the context of such services. As such, requirements regarding parental consent or age verification for children do not apply to our operations.",730 "batch_id": "B46"731 },732 {733 "gdpr_article_number": 78,734 "label": "NON_COMPLIANT",735 "compliance_score": 0.5,736 "met_points": "2, 4",737 "unmet_points": "1, 3",738 "justification": "2 of 4 obligations addressed; compliance score 0.50.",739 "segment": "If your complaint is not addressed by the competent supervisory authority, or you are not informed of its progress or outcome within three months, you have the right to seek an effective judicial remedy. Where a decision of the supervisory authority follows an opinion or decision from a relevant board, this information will be forwarded to the court in any related proceedings.",740 "batch_id": "B143"741 },742 {743 "gdpr_article_number": 91,744 "label": "NOT_APPLICABLE",745 "compliance_score": 0.0,746 "met_points": "",747 "unmet_points": "",748 "justification": "This article does not apply to this organisation or its activities.",749 "segment": "This section does not apply, as our organisation is not established as a church, religious association, or community, nor do we process personal data in the context of such entities. Therefore, the specific provisions referenced here are not relevant to our activities.",750 "batch_id": "B3"751 },752 {753 "gdpr_article_number": 36,754 "label": "NOT_APPLICABLE",755 "compliance_score": 0.0,756 "met_points": "",757 "unmet_points": "",758 "justification": "This article does not apply to this organisation or its activities.",759 "segment": "The requirement for prior consultation with supervisory authorities regarding high-risk data processing activities is not relevant to our organisation, as we do not engage in processing operations likely to result in a high risk to individuals\u2019 rights and freedoms. Our data handling practices do not involve large-scale systematic monitoring or processing of special categories of personal information. Therefore, the specific obligations related to seeking regulatory input before commencing such processing do not apply to our operations.",760 "batch_id": "B77"761 },762 {763 "gdpr_article_number": 5,764 "label": "COMPLIANT",765 "compliance_score": 0.8,766 "met_points": "1, 2, 3, 5, 6, 7, 9, 10",767 "unmet_points": "4, 8",768 "justification": "8 of 10 obligations addressed; compliance score 0.80.",769 "segment": "We process your personal data lawfully, fairly, and transparently for specific, explicit, and legitimate purposes. Data is kept accurate and up to date; inaccuracies are promptly corrected or erased. Your information is retained only as long as necessary and protected by appropriate security measures. We take full responsibility for these practices and can demonstrate our compliance at any time. Further processing for public interest or research follows strict safeguards.",770 "batch_id": "B75"771 },772 {773 "gdpr_article_number": 30,774 "label": "NON_COMPLIANT",775 "compliance_score": 0.11,776 "met_points": "4, 13",777 "unmet_points": "1, 2, 3, 5, 6, 7, 8, 9, 10, 11, 12, 14, 15, 16, 17, 18",778 "justification": "2 of 18 obligations addressed; compliance score 0.11.",779 "segment": "Our processing records include a description of the categories of data subjects and the types of personal data we handle. Where possible, we provide a general overview of the technical and organisational measures implemented to protect personal data, such as access controls and encryption protocols. However, our documentation does not currently include detailed information on the purposes of processing, recipient categories, data transfers, erasure time limits, or contact details of responsible parties. Further, not all processing activities and associated controllers or processors are systematically recorded. We recognise the importance of maintaining comprehensive records and are working towards addressing these gaps to enhance transparency and accountability in our data handling practices.",780 "batch_id": "B31"781 },782 {783 "gdpr_article_number": 96,784 "label": "NON_COMPLIANT",785 "compliance_score": 0.0,786 "met_points": "",787 "unmet_points": "1",788 "justification": "0 of 1 obligations addressed; compliance score 0.00.",789 "segment": "Our organisation does not review or update existing international agreements concerning personal data transfers that were established before 24 May 2016. These agreements remain in effect regardless of subsequent legal developments and will not be amended, replaced, or revoked in light of newer data protection requirements. We do not monitor their continued compliance with current data protection standards.",790 "batch_id": "B40"791 },792 {793 "gdpr_article_number": 5,794 "label": "COMPLIANT",795 "compliance_score": 0.8,796 "met_points": "1, 2, 3, 4, 5, 7, 9, 10",797 "unmet_points": "6, 8",798 "justification": "8 of 10 obligations addressed; compliance score 0.80.",799 "segment": "We process your personal data lawfully, fairly, and transparently for specific, legitimate purposes. Data collection is limited to what is necessary, and we strive to keep it accurate and up to date. Your information is retained only as long as needed and protected with appropriate technical and organisational safeguards. We take responsibility for ensuring compliance and demonstrating our commitment to these principles.",800 "batch_id": "B162"801 },802 {803 "gdpr_article_number": 30,804 "label": "COMPLIANT",805 "compliance_score": 0.67,806 "met_points": "1, 2, 3, 4, 5, 9, 10, 13, 14, 15, 16, 18",807 "unmet_points": "6, 7, 8, 11, 12, 17",808 "justification": "12 of 18 obligations addressed; compliance score 0.67.",809 "segment": "We maintain detailed records of our data processing activities, including the names and contact details of our organisation, any joint controllers, and our data protection officer. These records specify the purposes for processing personal data, describe the categories of data subjects and personal data processed, and list categories of recipients, including any international organisations involved. Our processors are also required to keep records of processing activities they carry out on our behalf, including their contact details and those of any relevant representatives. All records are maintained in electronic form and are made available to supervisory authorities upon request. These obligations apply unless exemptions for smaller enterprises are met.",810 "batch_id": "B186"811 },812 {813 "gdpr_article_number": 82,814 "label": "NON_COMPLIANT",815 "compliance_score": 0.0,816 "met_points": "",817 "unmet_points": "1, 2, 3, 4, 5, 6, 7",818 "justification": "0 of 7 obligations addressed; compliance score 0.00.",819 "segment": "We do not accept any liability for damages arising from the processing of your personal data, regardless of the circumstances or involvement of other parties. Any claims for compensation must be directed elsewhere, as we do not consider ourselves or our partners responsible for potential losses or infringements occurring during data processing, nor do we provide mechanisms for compensation or claims resolution.",820 "batch_id": "B25"821 },822 {823 "gdpr_article_number": 82,824 "label": "COMPLIANT",825 "compliance_score": 0.86,826 "met_points": "1, 2, 3, 5, 6, 7",827 "unmet_points": "4",828 "justification": "6 of 7 obligations addressed; compliance score 0.86.",829 "segment": "If your personal data is processed in a way that causes damage, all parties involved in the processing\u2014whether as data controllers or processors\u2014may be fully liable for the harm caused. You are entitled to compensation for such damages, and any party that has paid full compensation may seek to recover appropriate amounts from other responsible parties involved in the same processing. Legal claims can be made in the appropriate national court.",830 "batch_id": "B186"831 },832 {833 "gdpr_article_number": 12,834 "label": "NON_COMPLIANT",835 "compliance_score": 0.41,836 "met_points": "2, 3, 5, 7, 9, 14, 16",837 "unmet_points": "1, 4, 6, 8, 10, 11, 12, 13, 15, 17",838 "justification": "7 of 17 obligations addressed; compliance score 0.41.",839 "segment": "You may request access to your personal data or exercise your rights by contacting us in writing or electronically. Upon verifying your identity, we may also provide information orally if requested. If you submit a request electronically, we will respond using electronic means where feasible. In rare cases where requests are manifestly unfounded or excessive, we may refuse or charge a reasonable fee, and we may use standardized icons to help explain our data practices. If we are unable to identify you, we may request further information. Extensions to response times may occur due to complexity or volume of requests and may be up to two additional months.",840 "batch_id": "B158"841 },842 {843 "gdpr_article_number": 8,844 "label": "NOT_APPLICABLE",845 "compliance_score": 0.0,846 "met_points": "",847 "unmet_points": "",848 "justification": "This article does not apply to this organisation or its activities.",849 "segment": "This organisation does not offer services directly to children nor does it process the data of users under the age of 16. Therefore, requirements related to obtaining parental consent for children\u2019s data do not apply to our activities. If this changes in the future, we will update our privacy practices accordingly.",850 "batch_id": "B108"851 },852 {853 "gdpr_article_number": 77,854 "label": "COMPLIANT",855 "compliance_score": 1.0,856 "met_points": "1",857 "unmet_points": "",858 "justification": "1 of 1 obligations addressed; compliance score 1.00.",859 "segment": "If you submit a complaint to the relevant supervisory authority, you will be kept informed about the progress and outcome of your case. Additionally, you will receive information on your right to seek a judicial remedy if you are not satisfied with the authority\u2019s response or decision.",860 "batch_id": "B92"861 },862 {863 "gdpr_article_number": 6,864 "label": "NON_COMPLIANT",865 "compliance_score": 0.25,866 "met_points": "6, 9, 10, 15, 16, 22",867 "unmet_points": "1, 2, 3, 4, 5, 7, 8, 11, 12, 13, 14, 17, 18, 19, 20, 21, 23, 24",868 "justification": "6 of 24 obligations addressed; compliance score 0.25.",869 "segment": "We process personal data when it is necessary to pursue our legitimate interests or those of third parties, provided such interests are not overridden by your rights and freedoms, particularly if you are a child. Where we process data to comply with a legal obligation or for a task in the public interest, the relevant Member State law determines the basis and purpose for such processing. This legal basis may include specific provisions about the storage period and purposes for which your data may be used. If we consider processing your data for a different purpose than originally collected, and this is not based on your consent or a relevant law, we will assess the possible consequences for you as a data subject.",870 "batch_id": "B76"871 },872 {873 "gdpr_article_number": 35,874 "label": "COMPLIANT",875 "compliance_score": 0.84,876 "met_points": "1, 3, 4, 5, 7, 8, 9, 10, 12, 13, 14, 15, 16, 17, 18, 19",877 "unmet_points": "2, 6, 11",878 "justification": "16 of 19 obligations addressed; compliance score 0.84.",879 "segment": "When processing activities are likely to pose a high risk to individuals\u2019 rights and freedoms, particularly when new technologies are involved or when processing special categories of data or large-scale profiling, we conduct a data protection impact assessment (DPIA) before commencing such operations. This assessment includes a detailed description of the planned processing, its necessity and proportionality, risk evaluation, and measures to mitigate those risks. Input from our Data Protection Officer is sought, and where appropriate, we may consult with affected individuals or their representatives. We regularly review DPIAs to ensure ongoing compliance, especially if processing risks change, and consider approved codes of conduct as part of our assessment process.",880 "batch_id": "B53"881 },882 {883 "gdpr_article_number": 9,884 "label": "NOT_APPLICABLE",885 "compliance_score": 0.0,886 "met_points": "",887 "unmet_points": "",888 "justification": "This article does not apply to this organisation or its activities.",889 "segment": "Our organization does not collect, process, or store any data pertaining to individuals\u2019 racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification, health information, or data concerning a person\u2019s sex life or sexual orientation. As such, the requirements governing the handling of special categories of personal data are not relevant to our activities. Should our data collection practices change in the future, we will update this policy accordingly to ensure appropriate safeguards are in place.",890 "batch_id": "B177"891 },892 {893 "gdpr_article_number": 5,894 "label": "COMPLIANT",895 "compliance_score": 0.9,896 "met_points": "1, 2, 4, 5, 6, 7, 8, 9, 10",897 "unmet_points": "3",898 "justification": "9 of 10 obligations addressed; compliance score 0.90.",899 "segment": "We process your personal data lawfully, fairly, and transparently for specified, explicit, and legitimate purposes. Data collected is limited to what is necessary, kept accurate and up to date, and stored only as long as needed. We implement technical and organisational measures to protect your information and regularly review our practices to ensure accountability and compliance with applicable data protection standards.",900 "batch_id": "B112"901 },902 {903 "gdpr_article_number": 37,904 "label": "NOT_APPLICABLE",905 "compliance_score": 0.0,906 "met_points": "",907 "unmet_points": "",908 "justification": "This article does not apply to this organisation or its activities.",909 "segment": "The requirement to appoint a data protection officer is not applicable to our organisation, as our core activities do not involve large-scale processing of sensitive data, regular and systematic monitoring of individuals, or processing by a public authority. We regularly review our data handling practices to ensure compliance with relevant data protection obligations.",910 "batch_id": "B122"911 },912 {913 "gdpr_article_number": 16,914 "label": "COMPLIANT",915 "compliance_score": 1.0,916 "met_points": "1, 2",917 "unmet_points": "",918 "justification": "2 of 2 obligations addressed; compliance score 1.00.",919 "segment": "You have the right to request the correction of any inaccurate personal information we hold about you. If you identify that your data is incomplete, you may also ask us to complete it, including by providing a supplementary statement. We will address such requests without undue delay to ensure your information remains accurate and complete for the intended purposes.",920 "batch_id": "B78"921 },922 {923 "gdpr_article_number": 11,924 "label": "NOT_APPLICABLE",925 "compliance_score": 0.0,926 "met_points": "",927 "unmet_points": "",928 "justification": "This article does not apply to this organisation or its activities.",929 "segment": "This section is not applicable, as our organisation does not process data in a manner requiring identification of individuals solely for the purpose of compliance with requests or rights that would otherwise necessitate identification. Therefore, the requirements described here do not pertain to our current data processing activities.",930 "batch_id": "B122"931 },932 {933 "gdpr_article_number": 38,934 "label": "NOT_APPLICABLE",935 "compliance_score": 0.0,936 "met_points": "",937 "unmet_points": "",938 "justification": "This article does not apply to this organisation or its activities.",939 "segment": "The requirement to appoint a dedicated data protection officer does not apply, as our organisation\u2019s size, nature of processing, and activities do not meet the specific thresholds necessitating this role. We continually review our data handling practices to ensure ongoing compliance and will reassess this requirement should our operations or processing activities change in the future.",940 "batch_id": "B148"941 },942 {943 "gdpr_article_number": 89,944 "label": "NOT_APPLICABLE",945 "compliance_score": 0.0,946 "met_points": "",947 "unmet_points": "",948 "justification": "This article does not apply to this organisation or its activities.",949 "segment": "This section is not relevant to our operations, as we do not process personal data for archiving in the public interest, scientific or historical research, or statistical purposes. Therefore, the requirements described here do not apply to our activities.",950 "batch_id": "B20"951 },952 {953 "gdpr_article_number": 20,954 "label": "NON_COMPLIANT",955 "compliance_score": 0.0,956 "met_points": "",957 "unmet_points": "1, 2, 3, 4, 5, 6",958 "justification": "0 of 6 obligations addressed; compliance score 0.00.",959 "segment": "We do not currently provide users with a means to access, download, or transfer their personal data to another service. Requests to receive your data or have it sent directly to another provider cannot be accommodated. We retain sole control over your personal information collected via our services and do not support the portability or export of this information to external parties.",960 "batch_id": "B140"961 },962 {963 "gdpr_article_number": 32,964 "label": "COMPLIANT",965 "compliance_score": 0.57,966 "met_points": "3, 4, 7, 8, 10, 12, 13, 14",967 "unmet_points": "1, 2, 5, 6, 9, 11",968 "justification": "8 of 14 obligations addressed; compliance score 0.57.",969 "segment": "We implement technical and organisational measures tailored to the nature, scope, context, and purposes of the data processing activities we undertake. Our approach considers the varying risks to individuals\u2019 rights and freedoms, such as the potential for loss or unauthorised disclosure of personal data during transmission, storage, or other processing activities. We maintain procedures to restore timely access to personal data in the event of physical or technical incidents and regularly test and evaluate our security practices. Where appropriate, our compliance is supported by adherence to approved codes of conduct or certification mechanisms. Staff members only process personal data following authorised instructions, unless otherwise required by law.",970 "batch_id": "B184"971 },972 {973 "gdpr_article_number": 95,974 "label": "COMPLIANT",975 "compliance_score": 1.0,976 "met_points": "1",977 "unmet_points": "",978 "justification": "1 of 1 obligations addressed; compliance score 1.00.",979 "segment": "For processing activities related to the provision of publicly available electronic communications services over public communication networks, no additional requirements are imposed where existing obligations under relevant Union communications directives already apply. Processing in these contexts remains governed by sector-specific legal frameworks addressing equivalent data protection objectives.",980 "batch_id": "B155"981 },982 {983 "gdpr_article_number": 29,984 "label": "NON_COMPLIANT",985 "compliance_score": 0.0,986 "met_points": "",987 "unmet_points": "1, 2",988 "justification": "0 of 2 obligations addressed; compliance score 0.00.",989 "segment": "Our staff and third-party partners may access and process personal data independently as needed for operational purposes, without requiring explicit instructions from data controllers. Access to data is managed internally and is not limited solely to tasks directed by controllers or specific legal requirements. This approach enables efficient data handling but does not restrict processing solely to controller instructions.",990 "batch_id": "B181"991 },992 {993 "gdpr_article_number": 17,994 "label": "NON_COMPLIANT",995 "compliance_score": 0.46,996 "met_points": "2, 3, 6, 8, 11, 13",997 "unmet_points": "1, 4, 5, 7, 9, 10, 12",998 "justification": "6 of 13 obligations addressed; compliance score 0.46.",999 "segment": "You may request deletion of your personal data if you withdraw your consent and no other legal basis exists for processing, if you object to processing and there are no overriding legitimate grounds, or if erasure is required by law. If your data has been made public and must be deleted, we will take reasonable steps to inform other parties processing your data. Deletion may not be possible when processing is necessary for reasons of public interest in public health or for the establishment, exercise, or defence of legal claims.",1000 "batch_id": "B109"1001 },1002 {1003 "gdpr_article_number": 48,1004 "label": "NON_COMPLIANT",1005 "compliance_score": 0.5,1006 "met_points": "2",1007 "unmet_points": "1",1008 "justification": "1 of 2 obligations addressed; compliance score 0.50.",1009 "segment": "We acknowledge that this obligation does not affect other legal bases for international data transfers as outlined in relevant regulations. However, we may recognise or comply with court orders or administrative decisions from non-EU countries requiring data disclosure, even if such requests are not based on an existing international agreement or treaty with the EU or its Member States.",1010 "batch_id": "B126"1011 },1012 {1013 "gdpr_article_number": 16,1014 "label": "NON_COMPLIANT",1015 "compliance_score": 0.5,1016 "met_points": "1",1017 "unmet_points": "2",1018 "justification": "1 of 2 obligations addressed; compliance score 0.50.",1019 "segment": "If you believe any personal information we hold about you is inaccurate, you may request its correction. We will rectify any identified inaccuracies as soon as possible. Please note, however, that we do not currently accommodate requests to complete incomplete personal data or provide supplementary statements in relation to such data.",1020 "batch_id": "B165"1021 },1022 {1023 "gdpr_article_number": 89,1024 "label": "NOT_APPLICABLE",1025 "compliance_score": 0.0,1026 "met_points": "",1027 "unmet_points": "",1028 "justification": "This article does not apply to this organisation or its activities.",1029 "segment": "The provisions regarding safeguards for processing personal data for archiving, scientific, historical, or statistical purposes do not apply, as our organisation does not engage in such activities.",1030 "batch_id": "B8"1031 },1032 {1033 "gdpr_article_number": 80,1034 "label": "NON_COMPLIANT",1035 "compliance_score": 0.25,1036 "met_points": "2",1037 "unmet_points": "1, 3, 4",1038 "justification": "1 of 4 obligations addressed; compliance score 0.25.",1039 "segment": "You have the right to appoint a not-for-profit organization, legally established and active in the protection of personal data rights, to exercise specific rights on your behalf, including the right to seek remedies before supervisory authorities or courts. Please contact us if you wish to mandate such an organization to act regarding your rights related to the processing of your personal data.",1040 "batch_id": "B119"1041 },1042 {1043 "gdpr_article_number": 49,1044 "label": "NOT_APPLICABLE",1045 "compliance_score": 0.0,1046 "met_points": "",1047 "unmet_points": "",1048 "justification": "This article does not apply to this organisation or its activities.",1049 "segment": "Our organisation does not engage in any activities involving the transfer of personal data to countries outside the European Economic Area or to international organisations. As such, the requirements and conditions typically associated with international data transfers are not applicable to our operations. Should our practices change in the future to include such transfers, we will update our policies and procedures accordingly to ensure the highest standards of privacy and protection for all individuals.",1050 "batch_id": "B13"1051 },1052 {1053 "gdpr_article_number": 20,1054 "label": "NON_COMPLIANT",1055 "compliance_score": 0.17,1056 "met_points": "6",1057 "unmet_points": "1, 2, 3, 4, 5",1058 "justification": "1 of 6 obligations addressed; compliance score 0.17.",1059 "segment": "We are committed to ensuring that your rights and freedoms are not adversely affected by any data processing activities. However, requests to receive your personal information in a portable format or to have it transmitted to another provider are not currently supported by our systems. We may review these practices in the future as our technology and processes evolve.",1060 "batch_id": "B185"1061 },1062 {1063 "gdpr_article_number": 30,1064 "label": "COMPLIANT",1065 "compliance_score": 0.72,1066 "met_points": "1, 2, 3, 6, 7, 8, 9, 10, 11, 12, 13, 15, 18",1067 "unmet_points": "4, 5, 14, 16, 17",1068 "justification": "13 of 18 obligations addressed; compliance score 0.72.",1069 "segment": "We maintain detailed records of our data processing activities, including the name and contact details of our organisation, our representative, and our Data Protection Officer. These records specify the purposes for which we process personal data, and, where applicable, outline any transfers of personal data to third countries or international organisations, as well as the safeguards employed. Where possible, we include envisaged time limits for data erasure and provide a general description of technical and organisational security measures in place. Processors acting on our behalf also keep records of processing categories, and all records are made available to supervisory authorities upon request.",1070 "batch_id": "B56"1071 },1072 {1073 "gdpr_article_number": 21,1074 "label": "COMPLIANT",1075 "compliance_score": 0.67,1076 "met_points": "1, 2, 3, 6",1077 "unmet_points": "4, 5",1078 "justification": "4 of 6 obligations addressed; compliance score 0.67.",1079 "segment": "You have the right to object, at any time and on grounds relating to your particular situation, to the processing of your personal data when it is carried out for our legitimate interests or for the performance of a task in the public interest, including related profiling. We will cease processing your data unless we demonstrate compelling legitimate grounds or the processing is needed for legal claims.",1080 "batch_id": "B146"1081 },1082 {1083 "gdpr_article_number": 48,1084 "label": "COMPLIANT",1085 "compliance_score": 1.0,1086 "met_points": "1, 2",1087 "unmet_points": "",1088 "justification": "2 of 2 obligations addressed; compliance score 1.00.",1089 "segment": "We will only recognise or act upon any request from courts, tribunals, or administrative authorities in non-EU countries to transfer or disclose personal data if such requests are founded on an international agreement, such as a mutual legal assistance treaty, binding between the requesting country and the EU or an EU Member State. Other legal bases for international data transfers remain unaffected.",1090 "batch_id": "B78"1091 },1092 {1093 "gdpr_article_number": 77,1094 "label": "NON_COMPLIANT",1095 "compliance_score": 0.0,1096 "met_points": "",1097 "unmet_points": "1",1098 "justification": "0 of 1 obligations addressed; compliance score 0.00.",1099 "segment": "We process complaints internally and will contact you if further information is needed. Please note that we do not provide updates regarding the progress or outcome of your complaint, nor do we inform complainants about further legal remedies. For additional support or information, we recommend consulting the relevant authorities or seeking independent legal advice.",1100 "batch_id": "B57"1101 },1102 {1103 "gdpr_article_number": 44,1104 "label": "NOT_APPLICABLE",1105 "compliance_score": 0.0,1106 "met_points": "",1107 "unmet_points": "",1108 "justification": "This article does not apply to this organisation or its activities.",1109 "segment": "Our organisation does not transfer personal data to countries outside the European Economic Area. As such, requirements regarding international data transfers are not applicable to our operations. Should our data handling practices change in the future, we will update this policy accordingly to reflect any new obligations.",1110 "batch_id": "B95"1111 },1112 {1113 "gdpr_article_number": 35,1114 "label": "NOT_APPLICABLE",1115 "compliance_score": 0.0,1116 "met_points": "",1117 "unmet_points": "",1118 "justification": "This article does not apply to this organisation or its activities.",1119 "segment": "A data protection impact assessment is not required for our organisation\u2019s processing activities, as we do not engage in large-scale processing of sensitive personal data, systematic monitoring of individuals, or operations likely to result in high risks to the rights and freedoms of individuals. Our current services and data handling practices fall outside the scope necessitating such assessments. We regularly review our data processing activities to ensure continued compliance and will conduct an assessment if our operations change in a way that requires it.",1120 "batch_id": "B129"1121 },1122 {1123 "gdpr_article_number": 17,1124 "label": "COMPLIANT",1125 "compliance_score": 1.0,1126 "met_points": "1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13",1127 "unmet_points": "",1128 "justification": "13 of 13 obligations addressed; compliance score 1.00.",1129 "segment": "You have the right to request the erasure of your personal data without undue delay if, for example, your data are no longer needed, you withdraw your consent and no other legal basis exists, you object to processing and there are no overriding legitimate grounds, or your data have been processed unlawfully. If your data were made public, we will take reasonable steps to inform other controllers of your erasure request. Please note, this right may not apply where processing remains necessary for freedom of expression, legal obligations, public interest, public health, research, or for the establishment, exercise, or defense of legal claims.",1130 "batch_id": "B7"1131 },1132 {1133 "gdpr_article_number": 8,1134 "label": "NOT_APPLICABLE",1135 "compliance_score": 0.0,1136 "met_points": "",1137 "unmet_points": "",1138 "justification": "This article does not apply to this organisation or its activities.",1139 "segment": "Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. As a result, parental consent requirements and related safeguards are not applicable to our data processing activities. If we become aware of any such data being inadvertently collected, we will promptly delete it.",1140 "batch_id": "B106"1141 },1142 {1143 "gdpr_article_number": 12,1144 "label": "NON_COMPLIANT",1145 "compliance_score": 0.41,1146 "met_points": "1, 3, 7, 14, 15, 16, 17",1147 "unmet_points": "2, 4, 5, 6, 8, 9, 10, 11, 12, 13",1148 "justification": "7 of 17 obligations addressed; compliance score 0.41.",1149 "segment": "We strive to provide information about your personal data in a concise and clear manner, using plain language that is easy to understand and accessible. If you request information, we may ask for additional details to verify your identity. Where requests are repetitive or excessive, we reserve the right to assess the nature of the request and may provide details orally after identity verification. Standardised icons may be used to summarise our data processing activities in a clear and legible way. Where necessary, we may extend our response time due to the complexity or volume of requests, and will follow internal procedures to evaluate and document such cases.",1150 "batch_id": "B80"1151 },1152 {1153 "gdpr_article_number": 16,1154 "label": "NON_COMPLIANT",1155 "compliance_score": 0.5,1156 "met_points": "2",1157 "unmet_points": "1",1158 "justification": "1 of 2 obligations addressed; compliance score 0.50.",1159 "segment": "Upon receiving a request from an individual, we will complete any incomplete personal information held about them, including through a supplementary statement, where this aligns with the purposes for which the data is processed.",1160 "batch_id": "B42"1161 },1162 {1163 "gdpr_article_number": 22,1164 "label": "NON_COMPLIANT",1165 "compliance_score": 0.12,1166 "met_points": "3",1167 "unmet_points": "1, 2, 4, 5, 6, 7, 8",1168 "justification": "1 of 8 obligations addressed; compliance score 0.12.",1169 "segment": "We may use automated decision-making, including profiling, to determine eligibility for certain services when you have provided your explicit consent. Please note that these decisions may have legal or other significant effects for you. By continuing to use our services and providing consent, you acknowledge and accept the use of automated processing for these purposes.",1170 "batch_id": "B115"1171 },1172 {1173 "gdpr_article_number": 16,1174 "label": "NON_COMPLIANT",1175 "compliance_score": 0.5,1176 "met_points": "2",1177 "unmet_points": "1",1178 "justification": "1 of 2 obligations addressed; compliance score 0.50.",1179 "segment": "Upon request, we will complete any incomplete personal information you provide, including by allowing you to submit a supplementary statement. If you believe any of your information is incomplete, please contact us to update your records.",1180 "batch_id": "B9"1181 },1182 {1183 "gdpr_article_number": 79,1184 "label": "NON_COMPLIANT",1185 "compliance_score": 0.33,1186 "met_points": "2",1187 "unmet_points": "1, 3",1188 "justification": "1 of 3 obligations addressed; compliance score 0.33.",1189 "segment": "Legal proceedings related to data processing activities will be brought before the courts of the Member State where our company is established. This ensures that any claims or disputes arising from the handling of personal data are addressed within the jurisdiction in which we operate.",1190 "batch_id": "B153"1191 },1192 {1193 "gdpr_article_number": 30,1194 "label": "NON_COMPLIANT",1195 "compliance_score": 0.06,1196 "met_points": "8",1197 "unmet_points": "1, 2, 3, 4, 5, 6, 7, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18",1198 "justification": "1 of 18 obligations addressed; compliance score 0.06.",1199 "segment": "We implement various technical and organisational security measures, such as access controls, encryption, and regular security assessments, to protect personal data against unauthorised access, alteration, or loss. These measures are designed to ensure the ongoing confidentiality, integrity, availability, and resilience of our processing systems and services.",1200 "batch_id": "B28"