Pursuant to Art. 35 of the GDPR, conducting an impact assessment on the protection of personal data is the responsibility of the controller (if a given type of processing - in particular using new technologies - due to its nature, scope, context and purposes, is likely to result in a high risk of violating the rights and freedoms of natural persons ).

At Startquestion, we process personal data as a processor, however, in accordance with Art. 28 section 3 letter f) GDPR, as well as pursuant to the GDPR agreement, as a processor, we help the administrator to fulfill this obligation, taking into account the nature of processing and the information available to us (which means, in particular, providing the appropriate PDC, at his request, with appropriate information on security or functionality our Startquestion system).