Among others, to allow interested parties (holders of personal data) to exercise their rights in data protection (access, rectification, deletion, limitation of processing, portability and opposition).
As the controller of such data, you must enable users and customers who provide you with data on your website to effectively exercise these data protection rights and be able to respond as quickly as possible to requests to exercise such rights.
In order to respond to these rights in a timely manner, you must have a clear procedure that includes all the forms (for each of the rights) for both the request and the response to them.
Rule 5: Apply the necessary security measures to ensure safety
I am not going to go into this topic in detail, I will only tell you that no matter how much you inform or ask for consent, if you do not apply adequate security measures in relation to the level of risk of the treatments you perform, the rest will be of little use to you.
The agency provides you with tools through Gestiona EIPD so that you can analyze your risk level and apply the appropriate security measures, as well as so that you can obtain your own record of processing activities, through Facilita RGPD , the tool created by the AEPD.