This information is usually provided via a privacy notice, ideally at the first point of contact with an individual or at the first point their data is being collected and processed.
Darperir yr wybodaeth hon fel arfer trwy hysbysiad preifatrwydd, yn ddelfrydol pan gysylltir gyntaf ag unigolyn neu pan fydd ei ddata'n cael eu casglu a'u prosesu am y tro cyntaf.