Data transfer¶

To document your internal and external data flows, you can use the "Data transfer" function. You can use the Data Forwarding function as well as all other additional functions in the DP, TOM, DPA and Audit modules. As with the other additional functions Measures and Systems, you have an overview of all data transfers in your DSM menu. The following example shows the flow of the function when a data flow is created in a processing activity:

Recording of a data transfer¶

If you select the button Data transfer in the desired module, you can create a new data transfer or select already created data transfers. This view can be switched to already archived, active or all data transfers.

In the "Transferred data" field, you can specify the type of data forwarding; optionally, you can specify a validity period. You can conclude the documentation of the data transfer at this point with [Save and exit], or enter further information as to whether the data is transferred to an internal or external location.

In case of an internal data transfer you can also document to which department the data will be forwarded and enter additional information in the free text field. With [Save and exit] you can finish the creation.

External bodies¶

In case of an external transfer, you should name the legal basis. For this purpose, a free text field is available in the lower area or select common legal bases from the drop-down menu.

Here, too, you can conclude the documentation of the data transfer at this point with [Save and Exit], or enter further details as to whether the data will be transferred to within the EU, or to a safe third country, or whether the data will be transferred to a not safe third country.

Transfer within the EU or safe third country¶

Here it is now possible to name the destination of the transfer and to document a link with an existing order processing documented in Privacysoft.

With [Save and Exit] you can finish the installation.

Transfer to a non-secure third country¶

In case of an external transfer to an unsafe third country, you should document how you ensure that the data transfer to the third country is permissible, for this purpose a free text field is available in the lower area or select common security guarantees from the drop-down menu. You can also document a link to an existing order processing documented in Privacysoft.