Define the Data Categories
Define processed data, storage periods and processing locations.
This work is licensed under CC BY-SA 4.0
Select all data categories which are processed by each service provider.
If you have selected all data categories, click “edit” in order to specify how long the data is retained for (storage duration) and where the data is processed (storage location).
Storage duration
If the service provider has specified a maximum timeframe, after which any personal data is erased or fully anonymised, indicate this time frame (e.g. 6 months).
If the data is retained as long as necessary for achieving a given purpose (e.g. as long as a contract with the website visitor is active), select “until the purpose is fulfilled”.
If the storage duration is determined by law (e.g. tax‑relevant accounting records and invoices), select “legal storage period” and indicate the specific legislation.
Storage location
Select the countries to which personal data is transmitted. If the country is part of the European Union (EU) or European Economic Area (EEA), it is sufficient to select “EU/EEA”.
If a country lies outside the EU or EEA, you must indicate the legal basis on which this so‑called “third‑country transfer” takes place.
For many industrialised countries, the EU Commission has issued an “adequacy decision” (see list), warranting that the receiving country has a data protection level comparable to that in the EU.
Apply to all data categories
As all data is usually processed in a similar way, tick the box “Apply to all data categories”.
If a particular data category has a different storage duration or storage location, you can adjust that category individually afterwards.
How is this guide?
Shape Consenter Together
Consenter is built on an open and participatory process that grows through community collaboration. Whether you share feedback, improve the documentation, or contribute to the Risk Configuration Guides or Technical Integration Guides, your expertise helps make Consenter more privacy-friendly, interoperable, and useful for everyone—including your own users and services: Get finally your benefits and control the risks when sharing personal data.
Last updated on