Docuplay mission and motto: Improve the world through an Internet-enhanced education in all knowledge, for all people, at any age, throughout life. (N. 1.)

UNIVERSES OF DOCUPLAY

Educational Service
Economic Service
Social service
Information Service
Competitive Service
Docuplay flag and its symbology (N. 2.)


B5.-Regulations and principles

General Summary

B5.1.-Code of conduct

Summary

I.-Registration and subscription

II.-Standards of conduct in the Central of activities

III.-Responsibilities of the two contracting parties

IV.-On the correct use of the study contents

 

B5.2.-Regulations on protection of personal data (*)

Summary

I.-General provisions

II.-Principles

III.-Rights of the interested party

IV.-Responsible for the treatment and in charge of the treatment

V.-Transfers of personal data to third countries or international organizations

 

Frequently asked questions (FAQ)

&&&

B5.1.-Code of conduct

I.-Registration and subscription

About registration or registration in Docuplay. About subscribing to its courses or COCs

Article 1.1.-Enrollment or registration in Docuplay allows the student to navigate, first, through the Quick Guide to know all the resources and services that Docuplay offers in any of its courses and, secondly, through the lists of courses DDC and TOP to choose a course to subscribe to.

Article 1.2.-Once you have decided to subscribe to a course, click on the Subscription link in your menu and the form to be filled in will appear, while the tables of mandatory rules for both Docuplay and the student, who appear After reading them, you will give your consent for the completion of the subscription form.

1.2.1.-Student will not use false or fictitious data in his registration or registration form in Docuplay or in his course subscriptions.

1.2.2.-Student will not attempt to falsify or alter the data of documentaries, rankings, collaborations, comments, textual quotes etc.

Article 1.3.-Pay the fee required by Docuplay for their services, and opt for a subscription under flat rate or payment for each subscription.

1.3.1.- If you opt for the flat rate regime, you will pay a small monthly fee (pending determination and announcement) that will entitle you to simultaneously subscribe up to a maximum of six courses. Having reached that maximum limit of courses subscribed at the same time, you can only subscribe to a new course when you terminate any of the others by requesting your corresponding Activity Block Register with contents and services.

a) Docuplay will terminate a subscribed course at the time student requests his Activity Block Register.

b) The payment of the monthly fee will be made automatically within five business days from the date of the first subscription on a flat rate basis and by a PayPal micropayment system or by bank account.

c) Non-payment of two consecutive monthly payments will block all subscriptions until payment is made.

1.3.2.-If you opt for the subscription payment scheme, you will pay a fee for each course you subscribe at the time of the subscription.

a) Docuplay will consider a course is completed when you request the corresponding Activity Activity Block Register.

b) After completing a course and requesting and getting your Activity Block Register., you can re-subscribe again for the purpose of updating and / or deepening, after eighteen months after the date of request of your last activity records.

Article 1.4.- For the request of the Activity Block Register.of a course, which will mean the completion of it, click on the corresponding link of the resource B4..

II.-Standards of conduct in the Central of Study

Article 2.1.-Be loyal and equitable in relations with your fellow students or classmates or COC, collaborating within their means, recognizing and corresponding to the help received, informing the Docuplay management of any irregularity committed to the detriment of the docuplayan community etc.

Article 2.2.-In the comments and participations, docuplayans will not transgress the just limits of freedom of expression and debate nor incur personal attacks or offenses.

Article 2.3.-The language used in the contents generated by docuplayans must be grammatically and syntactically correct. Serious and repeated faults in both directions must be subject to negative votes from other students, which will be reflected in the respective Activity Block Registers..

Article 2.4.-The comments published by docuplayans must be free of moral and legal infractions, such as, for example, expressions or opinions that constitute insults, threats, defamation, slander, illegality, arbitrary intolerance and contempt regarding moral, religious values ​​and political, cultural, ethnic characteristics, etc.

Article 2.5.-Docuplay may delete or suppress the contents of docuplayans that violate any of the previous norms.

III.-Responsibilities of the two contracting parties

Article 3.1.- The use of the Docuplay site implies that you agree with the conditions of this code, as well as, in general, with any other rule established in the texts of this site or platform.

Article 3.2.-If you did not agree with any of these conditions, you must refrain from subscribing.

Article 3.3.-Docuplay will withdraw the right to subscribe to anyone who violates any of its regulations.

IV.-On the correct use of the study contents

Article 4.1.- Students of any Docuplay course will respect the intellectual property rights of the files provided by the search engines, whether they are download or link.

Article 4.2.- If a docuplayan appears as responsible for any damage caused to the contents, services or image of Docuplay, through, for example, malware, plagiarism of its contents and services, breach of confidentiality, etc., it will be blocked before proceeding. to sue him legally.

Article 4.3.- It is not allowed.

-Copy or replicate the contents and services for use outside the site www.docuplay.com;

-use the name, logo, document in operations and communications outside Docuplay;

- Upload the brand, image, site or any of the Docuplay courses to promote third-party content or services in a fraudulent way.

-Manipulate or falsify the contents of a COC by modifying or inserting into them unauthorized elements, especially obscene, provocative, offensive content ..., or contents infected with viruses that may interfere or prevent Docuplay services.

Article 4.4.- Students, by subscribing to a course, grant Docuplay the license to use their `` locked '' records of activities in that course for statistical and promotional purposes, with the due guarantee of respect for their personal rights.

Article 4.5.- Students will not participate in Docuplay competitions and leagues if they do not meet the pre-established requirements or have not been selected; they will not adulterate or hinder Docuplay competitions and leagues that reveal confidential information, intervene for or against the participants, etc.

Article 4.6.- Docuplay undertakes to make all possible arrangements and presentations so that companies and institutions potentially interested in student services can know the Activity Block Register of each of them. It also undertakes to notify students of any other benefits or rewards that it has deserved with its results or performance in a course, such as participation in doculeagues etc.

 

B5.2.-Regulations on protection of personal data (*)

(*) EUROPEAN UNION: General Data Protection Regulation, 2018

I.-General provisions

Article 4 Definitions -4) "profiling" -

Development of your intellectual profile to personalize and make the best use of your course study

The purpose of personal data processing by Docuplay is to create profiles with some of the purposes indicated in the definition of the Regulation, and others that are not included in it, such as their knowledge of the subject of a course, their expertise in the use of the resources that Docuplay offers you, your collaborative skills, customize Docuplay services, make your study profitable before third parties (private and public companies) etc.

Article 4 Definitions -5) "pseudonymisation" -

Use of a pseudonym to protect your personal identity before third parties

Docuplay guarantees the pseudonymisation of personal data with the following objectives: guarantee the non-identification of students or alumni in pages reproduced in the Course Records in which the holder of the record intervenes together with other students of the course; to be able to make the continuity of the processing of personal data compatible with the right of the students to withdraw their consent for said treatment, make the right to anonymity compatible with the use of their collaborations under the collaborative nature of Docuplay etc.

Article 4 Definitions -11) "consent of the interested party" -

Your consent to this treatment is expressed by the fact of your subscription

Docuplay guarantees that, by providing the necessary information, the student's consent regarding the processing of their personal data will be based on a thorough knowledge of the purposes and consequences of the processing of their personal data and that, therefore, their agreement will be unequivocal and well founded.

Article 4 Definitions --14) "biometric data" -

Use of your biometric measurements to ensure the reliability of your data

Docuplay will use "biometric measurements" such as fingerprints, voice, iris, etc. to ensure the reliability of personal data or, in other words, to ensure that student performance data, such as responses, time spent, comments, contributions etc. , correspond effectively to the holder of the course activity record.

Article 4 Definitions -20) "binding corporate standards" -

Complementation of the rules of the GDPR with those of the Docuplay code

Docuplay submits following this GDPR its own code of conduct, mandatory for its students and employees.

 

II.-Principles

Article 5 Principles relating to treatment

Docuplay assumes the principles of the GDPR regarding the processing of personal data of its students, and especially the following:

The processing by Docuplay of its students' personal data will comply with the principles of the GDPR in this way:

a) providing them with all the information about their purposes and making them beneficial for the students;

b) limiting treatment time, but continuing its use through pseudonymization and encryption resources so as not to harm the purposes of scientific and historical research and the benefit of further student promotions, in accordance with Docuplay's collaborative spirit;

c) reducing the number of personal data to the most essential;

d) taking care that they are accurate and true, ensuring that they are reviewed and updated periodically;

e) using pseudonymisation and encryption measures so that conservation and indefinite use of educational, cultural or scientific value data provided by alumni are possible, without harming their personal or professional interests.

f) ensuring the confidentiality of personal data, thereby reinforcing the pseudonymization and encryption of the same through the use of two tables-files, one for encrypted names and another for real ones.

 

Article 6 Legality of the treatment

Docuplay guarantees the fulfillment of the indispensable conditions for the legality of its treatment of the personal data of its students. In particular, the following:"A) the interested party gave his consent for the processing of his personal data for one or more specific purposes"; “B) the treatment is necessary for the execution of a contract in which the interested party is a party” (…); “C) the treatment is necessary for the fulfillment of a legal obligation applicable to the person responsible for the treatment.” E) the treatment is necessary for the fulfillment of a mission carried out in the public interest ”(…); “F) the treatment is necessary for the satisfaction of legitimate interests pursued by the person responsible (…) provided that the interests or fundamental rights and freedoms of the interested party do not prevail over those interests (…), in particular when the interested party is a child” .

Article 6 Legality of the treatment

In the case of an overcoming end, Docuplay will respect the provisions of the Regulation: “4. (...) the person responsible for the treatment, in order to determine if the treatment for another purpose is compatible with the purpose for which the personal data was initially collected, will take into account, among other things: a) any relationship between the purposes for which personal data have been collected and the purposes of the planned further processing; (…); "D) the possible consequences for the interested parties of the planned further treatment"; "E) the existence of adequate guarantees, which may include encryption or pseudonymization."

Article 7 Conditions for consent

Regarding the constancy of the students´ consent in the processing of their personal data, Docuplay will take into account these criteria of the Regulation: “1.When the treatment is based on the consent of the interested party, the person responsible must be able to demonstrate that he consented to the treatment of your personal data ”. "2. …, The request for consent will be presented in such a way that it is clearly distinguished from other matters, in an intelligible and easily accessible way and using a clear and simple language ”. (…) “3. The interested party will have the right to withdraw his consent at any time. The withdrawal of consent will not affect the legality of the treatment based on the consent prior to its withdrawal. Before giving his consent, the interested party will be informed of it. It will be as easy to withdraw consent as to give it. ”“ 4. In assessing whether consent has been freely given, the fact that, among other things, the performance of a contract, including the provision, will be taken into account to the greatest extent possible. of a service, it is subject to the consent to the processing of personal data that are not necessary for the execution of said contract ”.

Article 8 Conditions applicable to the child's consent in relation to the services of the information society

Regarding the consent of the child or minor (up to 16 years), Docuplay assumes the criteria of the GDPR Regulation:

"one. ..., the processing of a child's personal data will be considered lawful when he is at least 16 years old. If the child is under 16 years of age, such treatment will only be considered lawful if the consent of the parental authority or guardianship over the child was given or authorized, and only to the extent that it was given or authorized. ”

"2. The person responsible for the treatment will make reasonable efforts to verify in such cases that the consent was given or authorized by the owner of the parental rights or guardianship over the child, taking into account the available technology. ”

Article 9 Treatment of special categories of personal data

Regarding the treatment of "special categories of personal data", Docuplay requests consent for the treatment of the same "when one of the following circumstances occurs", and especially that of section j) of the GDPR:

“The processing of personal data that reveals ethnic or racial origin, political opinions, religious or philosophical beliefs, or union affiliation, and the treatment of genetic data, biometric data aimed at uniquely identifying a natural person are prohibited , health related data or sexual life data ”), Docuplay asks for the consent to treat them

“When one of the following circumstances occurs:

“A) the interested party gave his explicit consent for the processing of said personal data with one or more of the specified purposes” (…); “B) the treatment is necessary for the fulfillment of obligations and the exercise of specific rights of the person responsible for the treatment or the interested party” (…); “C) the treatment is necessary to protect the vital interests of the interested party” (…); "E) the processing refers to personal data that the interested party has made manifestly public"; “G) treatment is necessary for reasons of essential public interest” (…); “H) the treatment is necessary for the purpose of preventive or occupational medicine, evaluation of the worker's work capacity” (…); “J) the treatment is necessary for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes, in accordance with article 89, paragraph 1” (…), purposes that complement the educational documents of Docuplay.

 

III.-Rights of the interested party

Section 1

Transparency and modalities

Article 12 Transparency of information, communication and modalities of exercising the rights of the interested party

With respect to the provisions of article 12 of the Regulation, Docuplay will comply with the provisions in sections 1 to 4, but warning students that “5. (...) GDPR

With respect to the provisions of article 12 of the Regulation, Docuplay will comply with the provisions in sections 1 to 4, but warning students that

"5. (...) When the requests are manifestly unfounded or excessive, especially due to their repetitive nature, the controller may:

a) collect a reasonable fee based on the administrative costs incurred to facilitate the information or communication or perform the requested action, or

b) refuse to act on the request. The person responsible for the treatment will bear the burden of demonstrating the manifestly unfounded or excessive nature of the request ”.

Section 2

Information and access to personal data

Article 13 Information to be provided when personal data is obtained from the interested party

In compliance with the provisions of the Regulation in its article 13, these are the information declared by Docuplay:

GDPR

In compliance with the provisions of the Regulation in its article 13, these are the information declared by Docuplay:

Regarding paragraph 1:

a + b) Responsible: Jesús González Bedoya, docuplay@docuplay.com;

c) purposes of the treatment: set forth in the Mission and the Motto of Docuplay, on the cover; legal basis: the contract between Docuplay and the student, implicit in the fact of his subscription;

e) immediate recipients: the interested parties themselves subscribed to Docuplay courses; next recipients: potential employers of immediate recipients; remote recipients: the societies to which the immediate recipients belong; f) Docuplay intends to transfer personal data, in a first phase, to all countries that share the same language and, later, to the whole world, in application of its strategic principle, collaborativism and given the rapid improvement of automatic translation from any text to any language.

Regarding paragraph 2, so that your data processing is “loyal and transparent”, the person in charge of Docuplay guarantees:

a) that from the beginning the student's personal identification data will be hidden by means of pseudonymisation and encryption and kept in different files, which will allow its indefinite preservation without prejudice to personal interests;

“B) the existence of the right to request the person responsible for the treatment access to the personal data related to the interested party, and its rectification or deletion, or the limitation of their treatment, or to oppose the treatment, as well as the right to the portability of the data";

C)…, the existence of the right to withdraw consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal”;

"D) the right to file a claim with a supervisory authority";

"E) if the communication of personal data is a legal or contractual requirement, or a necessary requirement to sign a contract, and if the interested party is obliged to provide personal data and is informed of the possible consequences of not providing such data" ;

“F) the existence of automated decisions, including profiling, referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic applied, as well as the importance and consequences provided for said treatment for the interested party ”

"3.When the person responsible for the processing projects the subsequent processing of personal data for a purpose other than that for which they were collected, it will provide the interested party, prior to said further processing, information on that other purpose and any additional information pertinent to under section 2 ”

Article 14 Information to be provided when personal data has not been obtained from the interested party

In this case of the GDPR, Docuplay considers that they serve the same data provided in Article 13.

In this case of the GDPR, Docuplay considers that they serve the same data provided in Article 13.

 

Article 15 Right of access of the interested party

Regarding article 15, Docuplay declares the following about each section of GDPR:

Regarding article 15, Docuplay declares on each section:

"1. The interested party shall have the right to obtain confirmation from the person responsible for the processing of whether or not personal data concerning them are being processed and, in such case, the right to access personal data and the following information": The processing of the data Personal starts from the moment you subscribe to a course; The student can access their personal data in the form that they have filled in when they subscribe, subservice 1.2. and Docuplay offers the two pseudonymised and encrypted data files.

“A) the purposes of the treatment;”: see article 13, 1.c)

“B) the categories of personal data in question;”: v. art. 13, 1.e)

“C) the recipients or categories of recipients to whom the personal data was communicated or will be communicated (…);”: v. art. 13, 1. e)

“D) if possible, the expected period of retention of personal data or, if not possible, the criteria used to determine this period;”: v. art. 13, 2. a)

“E) the existence of the right to request from the responsible party the rectification or deletion of personal data or the limitation of the processing of personal data related to the interested party, or to oppose said processing;”: v. art. 13, 2. b)

“F) the right to file a claim with a supervisory authority;” v. art. 13, 2. d)

"G) when personal data has not been obtained from the interested party, any information available on its origin;":

“H) the existence of automated decisions, including the development of profiles, referred to in article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic applied, as well as the importance and consequences provided for said treatment for the interested party. ”v. art. 13, 2. f)

“2. When personal data is transferred to a third country or to an international organization, the interested party shall have the right to be informed of the appropriate guarantees under article 46 regarding the transfer.”: See art. 13, 1.f) and art. 46

3. The person responsible for the processing will provide a copy of the personal data subject to processing The person in charge may receive a reasonable fee based on administrative costs for any other copy requested by the interested party. When the interested party submits the request by electronic means, and unless it requests that it be provided in another way, the information will be provided in a common electronic format. ”: As already stated, the student has his personal data in the form that you fill in by subscribing to each course (in the 1. Educational service, subservice 1.2.); In addition, Docuplay offers two data files, the pseudonymised and the encrypted files.

Section 3

Rectification and suppression

Article 16 Right of rectification

Right assumed by Docuplay in the same terms of the GDPR

Right assumed by Docuplay in the same terms of the GDPR.

Article 18 Right to limit treatment

Docuplay assumes the provisions of article 18 of the GDPR, especially when the first of the aforementioned conditions occurs:

Docuplay assumes the provisions of article 18 of the Regulation, especially when the first of the aforementioned conditions occurs: “1. The interested party shall have the right to obtain from the data controller the limitation of the data processing when any of the following conditions is met : a) the interested party challenges the accuracy of the personal data, during a period that allows the person responsible to verify the accuracy of the same ”;

Given this circumstance, Docuplay also undertakes that: “3. Any interested party that has obtained the limitation of the treatment in accordance with paragraph 1 shall be informed by the person responsible before lifting said limitation”.

Article 20 Right to data portability

The person in charge of the processing of personal data in Docuplay will attend to the right to portability of their students under the conditions indicated in paragraphs 1 and 2. of the GDPR:

The person in charge of the processing of personal data in Docuplay will attend to the right to portability of his students in the conditions indicated in paragraphs 1 and 2 .:

“1. The interested party will have the right to receive the personal data that concerns him, that he has provided to a person in charge of the treatment, in a structured format, of common use and mechanical reading, and to transmit them to another person in charge of the treatment without being prevented by the person in charge who would have provided them ”(…)

"2. By exercising their right to data portability in accordance with paragraph 1, the interested party shall have the right to have personal data transmitted directly from responsible to responsible when technically possible."

 

Section 4

Opposition law and automated individual decisions

Article 21 Right of opposition

Docuplay considers that its students will not be able to oppose the processing of their personal data by adducing paragraphs 2 and 3 of article 21 of the GDPR Regulation, since they will never use “direct marketing”:

Docuplay considers that its students will not be able to oppose the processing of their personal data by adducing paragraphs 2 and 3 of article 21 of the Regulation, given that they will never use “direct marketing”:

“2. When the processing of personal data is aimed at direct marketing, the interested party will have the right to object at all times to the processing of personal data that concerns him, including the elaboration of profiles insofar as it is related to the aforementioned marketing". "3. When the interested party opposes the processing for direct marketing purposes, personal data will no longer be processed for said purposes. ” In accordance with paragraph 6 of this article, the processing of personal data will always aim at “the fulfillment of a mission carried out for reasons of public interest”, a mission declared on the cover of Docuplay.

Article 22 Automated individual decisions, including profiling

Regarding this article of the Regulation, Docuplay declares that it is considered legitimate by paragraphs 2 and 4 of the GDPR to make “automated individual decisions, including profiling”

Regarding this article of the Regulation, Docuplay declares that it is considered legitimate to make “automated individual decisions, including the elaboration of profiles” by paragraphs 2 and 4 of the GDPR.

"2. a) and c) 2. Paragraph 1 shall not apply if the decision: a) is necessary for the conclusion or execution of a contract between the interested party and a controller; (…) C) is based on the explicit consent of the interested party. ”

"4. The decisions referred to in paragraph 2 shall not be based on the special categories of personal data referred to in article 9, paragraph 1, unless article 9, paragraph 2, letter a) or g) is applied, and measures have been taken adequate to safeguard the rights and freedoms and legitimate interests of the interested party ”. Regarding the “appropriate measures” referred to in this paragraph, Docuplay has the pseudonymization and encryption of personal data since the student subscribes to a course and the use of different files in both cases.

 

 

Section 1

General Obligations

Article 24 Responsibility of the controller

Docuplay acts in accordance with paragraph 1 of this article of the GDPR by applying from the beginning of the subscription to a course "technical and organizational measures":

Docuplay acts in accordance with paragraph 1 of this article by applying from the beginning of the subscription to a course "technical and organizational measures":

"1. Taking into account the nature, scope, context and purposes of the treatment as well as the risks of varying probability and severity for the rights and freedoms of natural persons, the controller shall apply appropriate technical and organizational measures in order to to guarantee and be able to demonstrate that the treatment is in accordance with this Regulation. These measures will be reviewed and updated when necessary. ”Among those measures are the aforementioned pseudonymisation and encryption of personal data since the student subscribes to a course and the use of different files in both cases.

Article 25 Protection of data from design and default

Docuplay will develop and refine its “technical and organizational measures”, such as the already operational pseudonymisation, encryption and duplication of files, for the purpose of this article 25 of the GDPR (“data protection from design and default”):

Docuplay will develop and refine its technical and organizational measures, such as the already operational pseudonymisation, encryption and duplication of files, for the purpose of this article 25 ("data protection from design and default"):

"one. …, The person responsible for the treatment will apply, both at the time of determining the means of treatment and at the time of the treatment itself, appropriate technical and organizational measures, such as pseudonymization, designed to effectively apply the principles of data protection, such as the minimization of data, and integrate the necessary guarantees in the treatment, in order to fulfill the requirements of this Regulation and protect the rights of the interested parties. ”

“2. The person responsible for the treatment will apply the appropriate technical and organizational measures with a view to ensuring that, by default, only the personal data that is necessary for each of the specific purposes of the treatment are processed. This obligation will apply to the amount of personal data collected, to the extent of its processing, to its retention period and to its accessibility. Such measures shall ensure in particular that, by default, personal data is not accessible, without the intervention of the person, to an indeterminate number of natural persons ”.

Article 26 Co-responsible for the treatment

Docuplay will notify its students of the appointment, when it occurs, of “co-responsible for the treatment” (art. 26 of the GDPR), together with the necessary data so that they can contact them.

Docuplay will notify its students of the appointment, when it occurs, of “co-responsible for the treatment” (art. 26 of the GDPR), together with the necessary data so that they can contact them.

Article 27 Representatives of those responsible or responsible for processing not established in the Union

As with the appointment of co-managers, Docuplay will notify its students, according to the GDPR, of the appointments of representatives of those responsible for the processing of personal data (article 27) and of managers (art. 28).

As with the appointment of co-managers, Docuplay will notify its students of the appointments of representatives of those responsible for the processing of personal data (article 27) and of managers (art. 28). All of them “can only process said data following the instructions of the person in charge” (art. 29). Repeated demand in art. 32, paragraph 4.. ”The person in charge and the person in charge of the treatment will take measures to guarantee that any person acting under the authority of the person in charge or of the person in charge and who has access to personal data can only process said data following the instructions of the person in charge” (…)

Article 30 Registration of treatment activities

Regarding the “registration of treatment activities” required by this Article 30 of the Regulation, Docuplay will do so when it exceeds 250 employees, as established in paragraph 5 of the GDPR:

Regarding the “registration of treatment activities” required by this Article 30 of the Regulation, Docuplay will do so when it exceeds 250 employees, as established in paragraph 5 of the GDPR: “The obligations indicated in sections 1 and 2 shall not apply to no company or organization that employs less than 250 people ”(…,

Section 2

Security of personal data

Article 32 Treatment safety

In this article 32 on the "security of the processing" of personal data, the "technical and organizational measures" already contained in previous articles of the GDPR

In this article 32 on the “security of the processing” of personal data, the “technical and organizational measures” that are already included in previous articles of the “Regarding the“ registration of the processing activities ”required by this article 30 of the Regulation, Docuplay will do so when it exceeds 250 employees, as established in paragraph 5 of the GDPR :.

"one. the person in charge and the person in charge of the treatment will apply appropriate technical and organizational measures to guarantee a level of security appropriate to the risk, which may include, among others: a) pseudonymization and encryption of personal data; b) the ability to guarantee the permanent confidentiality, integrity, availability and resilience of treatment systems and services; c) the ability to restore availability and access to personal data quickly in the event of a physical or technical incident; d) a process of regular verification, evaluation and assessment of the effectiveness of technical and organizational measures to ensure the safety of the treatment. ”

Article 33 Notification of a violation of the security of personal data to the supervisory authority

Docuplay will jealously comply with the requirements of this Article 33 of the GDPR in paragraph 3 and its four sections and paragraph 5.

Docuplay will jealously comply with what is required in Article 33 of the Regulation in paragraph 3 and its four sections and paragraph 5 of the GDPR.

“3. The notification referred to in paragraph 1 shall, at a minimum: a) describe the nature of the violation of the security of personal data, including, where possible, the categories and the approximate number of interested parties affected, and the categories and the approximate number of affected personal data records; b) communicate the name and contact details of the data protection delegate or other contact point where more information can be obtained; c) describe the possible consequences of the violation of the security of personal data; d) describe the measures taken or proposed by the data controller to remedy the violation of the security of personal data, including, if appropriate, the measures taken to mitigate the possible negative effects. ”

5.The person responsible for the processing will document any violation of the security of personal data, including the facts related to it, its effects and the corrective measures taken. Such documentation will allow the supervisory authority to verify compliance with the provisions of this article. ”

Article 34 Communication of a violation of the security of personal data to the interested party

Regarding the notification to interested students of “a violation of the security of personal data” established in this article of the GDPR. Docuplay will ensure that it is not necessary to comply with the conditions of paragraph 3:

Regarding the notification to interested students of “a violation of the security of personal data” established in this article of the GDPR. Docuplay will ensure that it is not necessary to comply with the conditions of paragraph 3:

“3. The communication to the interested party referred to in paragraph 1 shall not be necessary if any of the following conditions are met: a) the person responsible for the treatment has adopted appropriate technical and organizational protection measures and these measures have been applied to the data personnel affected by the violation of the security of personal data, in particular those that make personal data unintelligible to anyone who is not authorized to access it, such as encryption; b) the person responsible for the treatment has taken further measures to ensure that there is no longer the likelihood that the high risk for the rights and freedoms of the interested party referred to in paragraph 1 will exist; ”(…)

 

Section 3

Impact assessment related to data protection and prior consultation

Article 35 Impact assessment related to data protection

Regarding the “Impact assessment related to data protection”, required by this article 35 of the GDPR in paragraph 7:

Regarding the “Impact assessment related to data protection”, required by this article 35 of the GDPR in paragraph 7:

“7. The evaluation shall include at least: a) a systematic description of the planned treatment operations and the purposes of the treatment, including, where appropriate, the legitimate interest pursued by the controller; b) an assessment of the need and proportionality of treatment operations with respect to their purpose; c) an assessment of the risks to the rights and freedoms of the interested parties referred to in paragraph 1, and d) the measures planned to address the risks, including guarantees, security measures and mechanisms that guarantee the protection of personal data, and demonstrate compliance with this Regulation, taking into account the legitimate rights and interests of interested parties and other affected persons. ”

Docuplay invites its students to consult in sectors 5. KEYS AND SUB-KEYS and 8. RECORDS OF COURSES the treatment operations carried out (sections a) and b) and sector 5 of the Study Center) in order to generate records of the activities of each student, such that they faithfully reflect the knowledge acquired and are thus valuable to themselves, to their potential employers and to society. In sector 8 of the Study Center, the possible risks of such treatments (sections c) and d)) “for the rights and freedoms of the interested parties” are taken into account, risks that are prevented by technical measures of pseudonymisation, encryption and duplication of files.

Section 5

Codes of conduct and certification

Article 40 Codes of conduct

Docuplay will adhere to all codes of conduct for the processing of personal data that may arise in the member countries of the European Union, in compliance with this article of the GDPR. Docuplay has its own code of conduct that complements this of the GDPR.

Docuplay will adhere to all codes of conduct for the processing of personal data that may arise in the member countries of the European Union, in compliance with this article of the GDPR. Docuplay has its own code of conduct that complements this of the GDPR.

V.-Transfers of personal data to third countries or international organizations

Article 44 General principle of transfers

Docuplay fundamentally guarantees the provisions of this article of the GDPR,

“Transfers of personal data will only be made that are subject to processing or will be after transfer to a third country or international organization if, subject to the other provisions of this Regulation, the person responsible and the person in charge of the treatment meets the established conditions in this chapter ”(…),

Article 89 Guarantees and exceptions applicable to processing for archival purposes in the public interest, scientific or historical research purposes or statistical purposes

Docuplay ensures its respect for the “guarantees and exceptions applicable to the processing” of personal data of its students, since its educational “purposes” must have those indicated in this article of the GDPR:

Docuplay ensures its respect for the “guarantees and exceptions applicable to the processing” of personal data of its students, since its educational “purposes” must have those indicated in this article of the GDPR:

“1. The processing for archival purposes in the public interest, scientific or historical research purposes or statistical purposes shall be subject to adequate guarantees, in accordance with this Regulation, for the rights and freedoms of the interested parties. These guarantees will make available technical and organizational measures, in particular to ensure respect for the principle of minimization of personal data. Such measures may include pseudonymisation, provided that such ends can be achieved. Whenever these ends can be achieved through further treatment that does not allow or no longer allows the identification of the interested parties, those ends will be achieved in that way.

2.When personal data is processed for scientific or historical or statistical research purposes, the law of the Union or of the Member States may establish exceptions to the rights referred to in articles 15, 16, 18 and 21, subject to the conditions and guarantees indicated in section 1 of this article, provided that these rights are likely to seriously impede or impede the achievement of the ends.

 

Frequently Asked Questions (FAQ)

B5.-Regulations and principles

Summary

B5.1.-What two kinds of rules does this Docuplay resource contain?

B5.2.-What is the main measure of Docuplay to protect the privacy of the students of each course?

B5.3.-What property rights must students respect?

B5.4.-What other third party rights are protected by the Docuplay code?

&&&&&

B5.1.-What two kinds of rules does this Docuplay resource contain?

-The rules of the European Union (EU) on the processing of personal data.

-The Docuplay code of conduct for its students and collaborations inscribers.

B5.2.-What is the main measure of Docuplay to protect the privacy of the students of each course?

-In the activity records of each student and course, the IDs or identifiers of other students may appear several times, for example, in the chats. Well, the way to protect the privacy of such students will be to cover their ID so that the person is not identified.

B5.3.-What property rights must students respect?

-The intellectual property right of content authors.

-The industrial property right of content publishers and tool manufacturers.

B5.4.-What other third party rights are protected by the Docuplay code?

-Rights to honor, privacy and the image itself.

-Right to respect cultural, moral, own and foreign political values