Bron: [Advisera](https://advisera.com/eugdpracademy/knowledgebase/list-of-mandatory-documents-required-by-eu-gdpr/)


| **Document**                                                                         | **Artikelnrs.**                                                                                                                                                                                                                                                                                                                                          |
| ------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Toestemmingsformulier                                                                | [6](../AVG-OST/AVG2018-Art-6.md), [7](../AVG-OST/AVG2018-Art-7.md), [9](../AVG-OST/AVG2018-Art-9.md)                                                                                                                                                                            |
| Privacy statement (extern)                                                           | [12](../AVG-OST/AVG2018-Art-12.md), [13](../AVG-OST/AVG2018-Art-13.md), [14](../AVG-OST/AVG2018-Art-14.md) |
| Privacy beleid (intern)                                                              | [24](../AVG-OST/AVG2018-Art-24.md)                                                                                                                                                                                                                                                                              |
| Privacy statement voor werknemers                                                    | [12](../AVG-OST/AVG2018-Art-12.md), [13](../AVG-OST/AVG2018-Art-13.md), [14](../AVG-OST/AVG2018-Art-14.md) |
| Retentiebeleid                                                                       | [5](../AVG-OST/AVG2018-Art-5.md), [13](../AVG-OST/AVG2018-Art-13.md), [17](../AVG-OST/AVG2018-Art-17.md), [30](../AVG-OST/AVG2018-Art-30.md)                  |
| Gegevensbeschermingseffectbeoordeling (DPIA)                                         | [35](../AVG-OST/AVG2018-Art-35.md)                                                                                                                                                                                                                                                                                                 |
| Register gegevensbeschermingseffectbeoordelingen (DPIA’s)                            | [35](../AVG-OST/AVG2018-Art-35.md)                                                                                                                                                                                                                                                                                                 |
| Verwerkingsovereenkomst voor leveranciers                                            | [28](../AVG-OST/AVG2018-Art-28.md), [32](../AVG-OST/AVG2018-Art-32.md), [82](../AVG-OST/AVG2018-Art-82.md)                                                                                                                                                                                                        |
| Procedure Datalekken                                                                 | [4](../AVG-OST/AVG2018-Art-4.md), [33](../AVG-OST/AVG2018-Art-33.md), [34](../AVG-OST/AVG2018-Art-34.md)                                                                                                         |
| Register Datalekken                                                                  | [33](../AVG-OST/AVG2018-Art-33.md)                                                                                                                                                                                                                                            |
| Meldingsformulier AP – op website AP                                                 | [33](../AVG-OST/AVG2018-Art-33.md)                                                                                                                                                                                                                                            |
| Meldingsformulier betrokkenen                                                        | [34](../AVG-OST/AVG2018-Art-34.md)                                                                                                                                                                                                                                                          |
| Functiebeschrijving Functionaris Gegevensbescherming                                 | [37](../AVG-OST/AVG2018-Art-37.md), [38](../AVG-OST/AVG2018-Art-38.md), [39](../../../../🎇%20Sparks/Artikel%2039%20Taken%20van%20de%20functionaris%20voor%20gegevensbescherming.md)                                                                               |
| Verwerkingsregister                                                                  | [30](../AVG-OST/AVG2018-Art-30.md)                                                                                                                                                                                                                                                                                    |
| Standard Contractual Clauses for the Transfer of Personal Data to Controllers ([^1]) | [46](../AVG-OST/AVG2018-Art-46.md)                                                                                                                                                                                                                                                                                           |
| Standard Contractual Clauses for the Transfer of Personal Data to Processors ([^1])  | [46](../AVG-OST/AVG2018-Art-46.md)                                                                                                                                                                                                                                                                                           |

[1]: Bij uitwisseling naar gebieden buiten de EER (Europese Economische Ruimte)

- [ ] procedure uitoefening rechten betrokkenen: Art. 12
- [ ] check deliverables for hotel website (Bear note)

## Zeer zinvolle (niet verplichte) documenten
* AVG fit/gap analyse
* AVG Project Plan
* Register van Privacy Statements [12](../AVG-OST/AVG2018-Art-12.md), [13](../AVG-OST/AVG2018-Art-13.md), [14](../AVG-OST/AVG2018-Art-14.md)
* Formulier voor intrekken toestemming [7](../AVG-OST/AVG2018-Art-7.md)
* Formulier verzoek om inzage [15](../AVG-OST/AVG2018-Art-15.md)
* Procedure inzage [7](../AVG-OST/AVG2018-Art-7.md), [15](../AVG-OST/AVG2018-Art-15.md), [16](../AVG-OST/AVG2018-Art-16.md), [17](../AVG-OST/AVG2018-Art-17.md), [18](../AVG-OST/AVG2018-Art-18.md), [20](../AVG-OST/AVG2018-Art-20.md), [21](../AVG-OST/AVG2018-Art-21.md), [22](../AVG-OST/AVG2018-Art-22.md)
* Leveranciersvragenlijst / checklist verwerkingsovereenkomst [28](../AVG-OST/AVG2018-Art-28.md), [29](../AVG-OST/AVG2018-Art-29.md), [30](../AVG-OST/AVG2018-Art-30.md), [31](../AVG-OST/AVG2018-Art-31.md), [32](../AVG-OST/AVG2018-Art-32.md)
* IT informatiebeveiligingsbeleid en –procedures [32](../AVG-OST/AVG2018-Art-32.md)

## Stuff op de website
- Privacyverklaring
- Cookie meldingen opt-out
- Consentregistratie, evt.
- Contactgegevens Privacy Officer
- Beschrijving hoe betrokkenen hun rechten kunnen uitoefenen (onderdeel van privacy statement)


## Voorbeelden
[Example introduction for an Internal Privacy Policy](../../../../📚️%20Literature%20notes/Example%20introduction%20for%20an%20Internal%20Privacy%20Policy.md)