S
Simpleasyty
Help Center — GDPR Processing Activity
GETTING STARTED
IntroductionQuick start
CREATE A SCHEMA
Create a schema from a templateCreate a schema from scratch
SCHEMA TEMPLATES
Security Risk RegisterISO 27001 Document ControlSOC 2 Evidence RegisterPolicy ManagementThird-Party RiskData ClassificationApplication PortfolioControlled DocumentArchitecture Decision RecordInformation Asset RegisterBusiness Continuity RegisterGDPR Processing Activity
IMPORT
Import a JSON or YAML schema packageImport Page Properties
FIELD TYPES
Schema field typesText fieldsNumber fieldsYes / No fieldsSingle choice fieldsDate / Time fieldsEmail fieldsURL fieldsConfluence reference fieldsList fieldsField group fields
MANAGE SCHEMAS
Manage schemasIndexed fields and filtersSchema permissions
CAPTURE DATA ON PAGES
Capture metadata on a pageCapture, validate and repair metadata
CREATE REPORTS
Build a Metadata ReportConfigure report filters and viewer controls
STORAGE & PRIVACY
Data residencyStorage in ForgeRetention and deletion
COMPLIANCE
Compliance workflowsMetadata, history and revisions
ADMINISTRATION & TROUBLESHOOTING
Import and exportSchema reconciliation and processesSecurity, storage and limitsTroubleshoot schemas, filters and reports

SCHEMA TEMPLATES

GDPR Processing Activity

Structure a processing-activity record so privacy teams can find ownership, legal basis, data categories and review information.

The GDPR is the EU's general framework for protecting personal data. Article 30 addresses records of processing activities, making a structured account of purposes, people, data and recipients valuable for privacy governance. This template helps organize that work, but must be adapted and reviewed before use as a formal Article 30 record.

Fields

A processing record should make the activity understandable to someone reviewing it later: why it happens, whose data is involved, and what governance choices were made. This structure is a starting point for that discussion.

FieldTypeWhat it captures
Processing activityRequired · IndexedTextName of the personal-data processing operation.
Data controllerRequired · IndexedTextOrganization or entity determining the purpose and means of processing.
PurposeTextReason the personal data is processed.
Data subjectsTextGroups of people whose personal data is processed.
Personal data categoriesTextKinds of personal information used in the activity.
Legal basisRequired · IndexedSingle choiceLegal ground recorded for the processing activity.Choices: Consent, Contract, Legal obligation, Vital interests, Public task, Legitimate interests
RecipientsTextPeople or organizations to whom personal data is disclosed.
Retention periodIndexedSingle choiceSelected period for keeping the data; it documents policy rather than deleting data.Choices: 1 year, 3 years, 5 years, 7 years, Indefinite
International transferIndexedYes / NoMarks whether personal data is transferred internationally.
Data ownerRequired · IndexedConfluence userPerson accountable for the data or processing activity.
DPIA requiredIndexedYes / NoRecords whether a data protection impact assessment is needed.
Last reviewIndexedDateDate on which the record was last reviewed.