Aggregate data
Aggregate data are made up from microdata files and are the result of a combination of different measures. They are obtained by adding or averaging the individual values obtained. They provide information on groups that have common characteristics.
Anonymization
The anonymization of personal data consists in modifying the content or structure of this data in order to make it very difficult or impossible to “re-identify” natural persons.
Consent
Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Controller or controller responsible for the processing
Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Cookies
Cookies are text files that are stored in a computer system via an Internet browser.
Cookie ID
A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate data subject’s browser from other Internet browsers that contain other cookies.
Data subject
Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
Encryption
Encryption is the process by which segments of data are mathematically mixed using a password.
General Data Protection Regulation
The General Data Protection Regulation is a set of rules designed to protect the personal data of European citizens. This Regulation covers the protection of personal data in the broadest sense of the term, regardless of their form or nature: private, professional, public. The GDPR was approved in April 2016 and as from 25 May 2018, this Regulation is fully applicable in all EU countries.
Personal data
Personal data means any information relating to an identified or identifiable natural person (“data subject”). In the definition provided above, “any information” means any information, such names, genders, occupations and other types of data that is available in different forms, including alphabetical, numerical and graphical, and is kept on paper or stored in computers or in any other manner.
Processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Processor
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Recipient
Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed whether a third party or not. However, public authorities who may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.
Third party
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.