Bron: [Advisera](https://advisera.com/eugdpracademy/knowledgebase/list-of-mandatory-documents-required-by-eu-gdpr/)


| **Document**                                                                         | **Artikelnrs.**                                                                                                                                                                                                                                                                                                                                          |
| ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Toestemmingsformulier                                                                | [6](AVG-OST/AVG2018-Art-6.md), [7](AVG-OST/AVG2018-Art-7.md), [9](AVG-OST/AVG2018-Art-9.md)                                                                                                                                                                            |
| Privacy statement (extern)                                                           | [12](AVG-OST/AVG2018-Art-12.md), [13](AVG-OST/AVG2018-Art-13.md), [14](AVG-OST/AVG2018-Art-14.md) |
| Privacy beleid (intern)                                                              | [24](AVG-OST/AVG2018-Art-24.md)                                                                                                                                                                                                                                                                              |
| Privacy statement voor werknemers                                                    | [12](AVG-OST/AVG2018-Art-12.md), [13](AVG-OST/AVG2018-Art-13.md), [14](AVG-OST/AVG2018-Art-14.md) |
| Retentiebeleid                                                                       | [5](AVG-OST/AVG2018-Art-5.md), [13](AVG-OST/AVG2018-Art-13.md), [17](AVG-OST/AVG2018-Art-17.md), [30](AVG-OST/AVG2018-Art-30.md)                  |
| Gegevensbeschermingseffectbeoordeling (DPIA)                                         | [35](AVG-OST/AVG2018-Art-35.md)                                                                                                                                                                                                                                                                                                 |
| Register gegevensbeschermingseffectbeoordelingen (DPIA’s)                            | [35](AVG-OST/AVG2018-Art-35.md)                                                                                                                                                                                                                                                                                                 |
| Verwerkingsovereenkomst voor leveranciers                                            | [28](AVG-OST/AVG2018-Art-28.md), [32](AVG-OST/AVG2018-Art-32.md), [82](AVG-OST/AVG2018-Art-82.md)                                                                                                                                                                                                        |
| Procedure Datalekken                                                                 | [4](AVG-OST/AVG2018-Art-4.md), [33](AVG-OST/AVG2018-Art-33.md), [34](AVG-OST/AVG2018-Art-34.md)                                                                                                         |
| Register Datalekken                                                                  | [33](AVG-OST/AVG2018-Art-33.md)                                                                                                                                                                                                                                            |
| Meldingsformulier AP – op website AP                                                 | [33](AVG-OST/AVG2018-Art-33.md)                                                                                                                                                                                                                                            |
| Meldingsformulier betrokkenen                                                        | [34](AVG-OST/AVG2018-Art-34.md)                                                                                                                                                                                                                                                          |
| Functiebeschrijving Functionaris Gegevensbescherming                                 | [37](AVG-OST/AVG2018-Art-37.md), [38](AVG-OST/AVG2018-Art-38.md), [39](../../Sparks/Artikel%2039%20Taken%20van%20de%20functionaris%20voor%20gegevensbescherming.md)                                                                               |
| Verwerkingsregister                                                                  | [30](AVG-OST/AVG2018-Art-30.md)                                                                                                                                                                                                                                                                                    |
| Standard Contractual Clauses for the Transfer of Personal Data to Controllers ([^1]) | [46](AVG-OST/AVG2018-Art-46.md)                                                                                                                                                                                                                                                                                           |
| Standard Contractual Clauses for the Transfer of Personal Data to Processors ([^1])  | [46](AVG-OST/AVG2018-Art-46.md)                                                                                                                                                                                                                                                                                           |

[1]: Bij uitwisseling naar gebieden buiten de EER (Europese Economische Ruimte)

- [ ] procedure uitoefening rechten betrokkenen: Art. 12
- [ ] check deliverables for hotel website (Bear note)

## Zeer zinvolle (niet verplichte) documenten
* AVG fit/gap analyse
* AVG Project Plan
* Register van Privacy Statements [12](AVG-OST/AVG2018-Art-12.md), [13](AVG-OST/AVG2018-Art-13.md), [14](AVG-OST/AVG2018-Art-14.md)
* Formulier voor intrekken toestemming [7](AVG-OST/AVG2018-Art-7.md)
* Formulier verzoek om inzage [15](AVG-OST/AVG2018-Art-15.md)
* Procedure inzage [7](AVG-OST/AVG2018-Art-7.md), [15](AVG-OST/AVG2018-Art-15.md), [16](AVG-OST/AVG2018-Art-16.md), [17](AVG-OST/AVG2018-Art-17.md), [18](AVG-OST/AVG2018-Art-18.md), [20](AVG-OST/AVG2018-Art-20.md), [21](AVG-OST/AVG2018-Art-21.md), [22](AVG-OST/AVG2018-Art-22.md)
* Leveranciersvragenlijst / checklist verwerkingsovereenkomst [28](AVG-OST/AVG2018-Art-28.md), [29](AVG-OST/AVG2018-Art-29.md), [30](AVG-OST/AVG2018-Art-30.md), [31](AVG-OST/AVG2018-Art-31.md), [32](AVG-OST/AVG2018-Art-32.md)
* IT informatiebeveiligingsbeleid en –procedures [32](AVG-OST/AVG2018-Art-32.md)

## Stuff op de website
- Privacyverklaring
- Cookie meldingen opt-out
- Consentregistratie, evt.
- Contactgegevens Privacy Officer
- Beschrijving hoe betrokkenen hun rechten kunnen uitoefenen (onderdeel van privacy statement)


## Voorbeelden
[Example introduction for an Internal Privacy Policy](../../Literature%20notes/Example%20introduction%20for%20an%20Internal%20Privacy%20Policy.md)