Part A. Description of the data processing

This first part of the DPIA provides a description of the characteristics of the personal data that may be generated and processed by Google as a result of the use of the G Suite Enterprise services.

This Part A starts with a short description of the processing of different kinds of data. It continues with a description of the different categories of personal data that may be processed in the Diagnostic Data, the categories of data subjects that may be affected by the processing, the purposes of the processing by Google, the locations where data may be stored, processed and analysed, and the data protection roles of the government organisations and Google as data processor and/or as (joint) data controllers.

Finally, this part A provides an overview of the different interests related to the processing, and of the retention periods.

1. The processing of personal data

This Section 1 provides a general overview of the risks caused by the processing of personal data resulting from the use of the G Suite Enterprise service.

Figure 1: Customer Data, Functional Data and Diagnostic Data

Customer Data Functional Data Diagnostic Data