The Metamorphosis Foundation through its Human Rights Online program focuses on protecting privacy by enhancing the capacities and knowledge of citizens and digital society institutions. Metamorphosis promotes access for all through innovative use and dissemination of knowledge and ethical use of new technologies. In this regard, Metamorphosis analyzed the aspect of informing the citizens about the processing of personal data while using the mobile application “MOJ DDV”.
According to the General Data Protection Regulation (GDPR), the controller of the Public Revenue Office should take appropriate measures to provide citizens with a concise, transparent and easily accessible form of information on:
- What are the objectives and legal basis for the processing of personal data and whether in the future this data may be processed for purposes other than using the mobile application “MOJ DDV”?
- Will personal data be disclosed to other users outside the Public Revenue Office?
- What are the deadlines for data retention by the Public Revenue Office?
- How can citizens exercise their right to correct and erase the personal data they provided for the purpose of using the mobile app “MOJ DDV”?
Metamorphosis recommends creating separate privacy policies for each application through which citizens disclose personal information to exercise their rights.