Data Controller

Our organization has designated a Data Protection Officer (DPO) who is responsible for ensuring compliance with GDPR requirements. The DPO is also responsible for ensuring that all employees, contractors, and third-party vendors who handle personal data on behalf of our organization are aware of their GDPR-related responsibilities and obligations.

Data Protection Impact Assessment (DPIA)

Our organization conducts DPIAs whenever we introduce new processing activities that are likely to result in a high risk to the rights and freedoms of data subjects. DPIAs are also conducted when significant changes are made to existing processing activities.

Lawful Basis for Processing Personal Data

Our organization processes personal data only when we have a lawful basis for doing so. This includes obtaining explicit consent from data subjects whenever necessary and ensuring that all data subjects are informed about the purposes for which their personal data will be processed.

Rights of Data Subjects

Our organization respects the rights of data subjects under GDPR and ensures that they can exercise their rights, including the right to access, rectify, erase, restrict, and object to processing of their personal data. Data subjects also have the right to data portability.

Security Measures

Our organization implements appropriate technical and organizational measures to ensure the security of personal data that we process. These measures include access controls, encryption of personal data, regular backups of personal data, regular security audits and testing, and staff training on data security and GDPR requirements.

Data Breach Notification

In the event of a data breach, our organization will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of data subjects. We will also notify affected data subjects without undue delay if the breach is likely to result in a high risk to their rights and freedoms.