Hi there,

Thank you for downloading this template.

We hope it will be a helpful resource for your organization's GDPR

compliance and managing employee photos and videos.

If you want to ensure compliance with maximum efficiency, you should

watch this short video to learn how to:

 connect a signed consent form to every image of an employee

 enable users to easily identify whether an image has been approved

for use (and how it can be used)

 change the consent status and usage rights of all images of an

employee if they withdraw their consent

Watch here: https://www.fotoware.com/how-to-be-gdpr-compliant-with-images

This is not a legal document. FotoWare makes no representation, warranty or guarantee of any kind concerning the accuracy or
completeness of any of the information contained in this guidance and instructions. This document is meant to be used as inspiration
only when creating your own GDPR Consent form.
 GDPR Consent Form for Photos & Videos [TEMPLATE]

I agree that [Company] can process my personal information as described here:

1. Personal data processing:

 Here, you should specify what personal information is required to be processed for the purpose, for example: Name,
address, email, phone number, photos identifying the individual.

2. Treatment covered by this Consent Form:

 Here, you should specify what kind of processing the personal data is intended for. Examples of processing are
collection, registration, organization, storage, use, dispatch.

Example: I understand that my personal data will be used for collection and registration in [Company’s] database. The
use of employee photographs is for marketing purposes of [company] or [company] products.

3. The treatment will only be carried out for the purpose of:
 Here, you should specify in which situations the treatment will be carried out and for which purpose(s).

Example: I understand that my personal data will be used for marketing purposes of [Company] and its products, and
recruitment of new employees to [Company]. Typically, at conferences, on the website, in Social Media or on Job
Advertising platforms.

4. Withdrawal of Consent:
 Here, you need to categorically demonstrate how the subject can withdraw their consent. This should inform them of
how to contact the necessary person if they want to change, find or delete their data, or how they can approve and
disapprove assets within the company’s Digital Asset Management system (which then automatically updates the
consent status and availability of the assets).

Example: I am aware that my consent is voluntary and can be withdrawn at any time by completing [specified contact
form] or sending an email to [specified address: GDPR@company.com]. I can also withdraw consent by selecting the
photos or videos that I disapprove for use, in the [company’s] digital asset management system [link].

Name:
Address:
Email:
Telephone:
(Other)

For more information on how [Company] processes your information and your rights see [link to your Privacy Policy].

Date/Place: Date/Place:

__________________________ __________________________
Signature (Employee) (Signature HR)

This is not a legal document. FotoWare makes no representation, warranty or guarantee of any kind concerning the accuracy or
completeness of any of the information contained in this guidance and instructions. This document is meant to be used as inspiration
only when creating your own GDPR Consent form.