RODO / GDPR
GDPR is EU Regulation 2016/679 on the protection of personal data. It has applied directly across the EU since 25 May 2018. RODO is the Polish abbreviation for the same regulation.
For websites and web applications, personal data can include form and account details, IP addresses, device identifiers, order history, location and analytics data when a person can be identified directly or indirectly.
A product owner should define the purposes and legal bases, data scope, retention, recipients and transfers outside the EEA. Users must receive the required information, their rights must be supported, data must be secured and appropriate processor agreements must be in place. Privacy by design and by default should shape the product from the start. Consent is only one possible legal basis.
Have an idea for growth?
Let's turn it into a solution that works.
Tell us what you'd like to achieve. In a free consultation, we'll shape your idea, set priorities, and find the best way to bring it to life.