{% extends "base.html" %} {% load i18n static %} {% block content %}
{% with 'img/'|add:LANG|add:'/gdpr_step1.svg' as image_static %} {% trans 'GDPR Process - Data Audit' %} {% endwith %}

{% blocktrans %}Data Audit{% endblocktrans %}

{% blocktrans %}In order to protect personal data as prefigured by GDPR, you first need to be fully aware of what personal data is being captured, processed and stored by your organization, or by third-party organizations on your behalf.{% endblocktrans %}

{% blocktrans %}To this end, you need to accurately identify and classify such data, by modelling the processes currently in place in your organization.{% endblocktrans %}

{% endblock %} {% block tutorial %}

{% trans 'Data Audit - How To' %}

{% trans 'Step 1. Create an Organization' %}

{% trans 'Log into the' %} {% trans 'amministrative interface' %} {% trans 'using your username and password' %}.

{% blocktrans %}You just need to click on the suggestion displayed in the Registry Status Widget. Otherwise, you may go to "Audit->Your organizations->Add Organization". Then, you can insert all details about your organization and save. {% endblocktrans %}

{% with 'img/'|add:LANG|add:'/add_organization.png' as image_static %} {% trans 'Add organization' %} {% endwith %} {% with 'img/'|add:LANG|add:'/organization.png' as image_static %} {% trans 'Acme Inc' %} {% endwith %}

{% trans 'Step 2. Associate a Business Process to your Organization' %}

{% blocktrans %}In general, you should insert each business process of your organization which is expected to manage personal data. In the edit page of your organization, click on the add (+) icon, of the field "business processes". Then fill in all details about the business process. {% endblocktrans %}

{% with 'img/'|add:LANG|add:'/add_process.png' as image_static %} {% trans 'Add Business Process' %} {% endwith %} {% with 'img/'|add:LANG|add:'/process.png' as image_static %} {% trans 'Human Resources Process' %} {% endwith %}

{% trans 'Step 3. Associate a Processing Activity to each Business Process' %}

{% blocktrans %}In general, for each business process, you should insert each processing activity which is expected to manage personal data. Data Processing activities always prefigure a specific (lawful) goal and purpose. In the edit page of a business process, click on the add (+) icon of the field "processing activities". Then fill in all details about the processing activity. {% endblocktrans %}

{% blocktrans %}In general, for each data processing activity you should specify:

{% endblocktrans %}

{% with 'img/'|add:LANG|add:'/add_activity.png' as image_static %} {% trans 'Add Processing Activity' %} {% endwith %} {% with 'img/'|add:LANG|add:'/activity.png' as image_static %} {% trans 'Contractualization' %} {% endwith %}

{% trans 'Step 4. Associate a Data Audit to each Processing Activity' %}

{% blocktrans %}You should insert the details about the data handled by each processing activity. In the edit page of a processing activity, click on the add (+) icon of the field "data audit". Then fill in all details about the data audit. {% endblocktrans %}

{% blocktrans %}In general, for each data audit you should specify:

{% endblocktrans %}

{% with 'img/'|add:LANG|add:'/add_data_audit.png' as image_static %} {% trans 'Add Data Audit' %} {% endwith %} {% with 'img/'|add:LANG|add:'/data_audit.png' as image_static %} {% trans 'Identity documents' %} {% endwith %}
{% endblock %}