GDPR outside the web: no need to provide a privacy policy?
<p>Consider a freelancer like a web developer, or a consultant, or a lawyer, etc. Their jobs involve, one way or another, handling some personal data: contents of databases, authentication data, private information of any kind, etc. Therefore, I believe such professionals always need to <strong>have a privacy policy</strong> written somewhere and comply with the GDPR. But do they also need to <strong>show it</strong> to their clients, and have their clients <strong>sign it</strong>? I guess not, unless consent is required. However I'm not completely sure.</p>
<p>So what I'm asking basically is, if a professional or a worker in general handles personal data reasonably in the &quot;expected&quot; way (that is, they won't sell it, don't use it for marketing purposes, etc.), is such professional required to show the privacy policy to the clients, even if the clients don't ask for it? If consent is not required, then there's no need to sign or accept anything, so I would expect this privacy policy to just be an &quot;informative&quot; document, rather than something required by law. In any case a signature would not be required I guess.</p>
<p>In a similar situation on the web, a website would have a link to the privacy policy somewhere in the footer (not very noticeable), and no banners, no notices, or checkboxes of any kind. I'm basically looking for the equivalent &quot;in real life&quot;.</p>

<h2>The freelancer is a <a href="https://www.i-scoop.eu/gdpr/data-processor-gdpr/" rel="nofollow noreferrer">data processor</a> under GDPR</h2>
<p>Data processors have similar but different obligations under GDPR as data controllers. Having a privacy policy is the least of them.</p>

contract-law gdpr european-union signature