{"id":6029,"date":"2018-04-10T15:40:18","date_gmt":"2018-04-10T14:40:18","guid":{"rendered":"http:\/\/www.etlsolutions.com\/?page_id=6029"},"modified":"2021-12-07T10:05:19","modified_gmt":"2021-12-07T10:05:19","slug":"our-approach-to-gdpr","status":"publish","type":"page","link":"https:\/\/etlsolutions.com\/our-approach-to-gdpr\/","title":{"rendered":"Our approach to the GDPR"},"content":{"rendered":"<p>This article sets out the steps that we are taking to ensure our company complies with the European Union&#8217;s General Data Protection Regulation (GDPR). This regulation is designed to protect an individual\u2019s personal data. In addition to giving citizens control of their personal data, the GDPR also aims to unify data protection laws across the European Union.\u00a0Our company policies are also compliant with the UK GDPR.<\/p>\n<p>To comply with the GDPR principles, organisations will need to ensure that all personal data is:<\/p>\n<ul>\n<li>Processed lawfully, fairly and in a transparent manner<\/li>\n<li>Collected for specified, explicit and legitimate purposes<\/li>\n<li>Adequate, relevant and limited to what is necessary in relation to the purposes<\/li>\n<li>Accurate and kept up-to-date<\/li>\n<li>Kept for no longer than necessary<\/li>\n<li>Processed in a manner that ensures appropriate security.<\/li>\n<\/ul>\n<p>In this article we explain how we will comply with these requirements.<\/p>\n<h2>Existing data audit<\/h2>\n<p>We need to demonstrate that we are processing and storing data according to the principles listed above. This includes the data we currently hold in our systems.<\/p>\n<p>We have carried out an audit of our current data to:<\/p>\n<ul>\n<li>Identify the personal data our company currently holds;<\/li>\n<li>Identify where the data is stored, the purpose for which it is used, how it is processed and who has access to it;<\/li>\n<li>Establish the original source of the data;<\/li>\n<li>Clarify the legal basis for storing and processing the data;<\/li>\n<li>Establish how long the data has been stored and whether or not we need to continue to hold the data.<\/li>\n<\/ul>\n<h2>Project audit<\/h2>\n<p>As data management specialists, we take compliance with the GDPR very seriously. In most of our work we are classified as a &#8216;Data Processor&#8217;. As a Data Processor, we have audited the projects we carry out for each of our clients to:<\/p>\n<ul>\n<li>Identify which data is classed as personal data and which, if any, is classed as sensitive personal data;<\/li>\n<li>Ensure that all data is transmitted to and from our servers according to the GDPR&#8217;s security requirements;<\/li>\n<li>Ensure that all data is processed securely and appropriately, according to the wishes of the client (the &#8216;Data Controller&#8217;) and the GDPR&#8217;s requirements;<\/li>\n<li>Keep records of the processing activities we undertake;<\/li>\n<li>Assist the Data Controller in allowing data subjects to exercise their rights under the GDPR;<\/li>\n<li>Assist the Data Controller in meeting its GDPR obligations in relation to the security of processing, the notification of personal data breaches and data protection impact assessments.<\/li>\n<\/ul>\n<h2>Supplier audit<\/h2>\n<p>Melbourne Server Hosting Ltd is the host for our servers. Melbourne is a Tier 2 data centre, ensuring compliance with GDPR data security requirements. Physical security controls at the Melbourne data centre include 24&#215;7 monitoring, visitor logs, vetting of all entrants and dedicated cages for our hardware using anonymous labelling.<\/p>\n<p>EmailOctopus, trading under Three Hearts Digital Ltd, is the Data Processor for our email newsletter activity. We have audited EmailOctopus\u2019s compliance with the GDPR and established that the company is registered with the ICO and fully complies\u00a0with all current EU and UK data protection laws.<\/p>\n<h2>Website audit<\/h2>\n<p>Our website\u2019s terms and conditions, privacy policy and cookie policy have been updated to ensure they comply with the requirements of the GDPR. Visitors to the website have the option to immediately add or remove cookies. All sign-up forms clearly state what data is being collected, what it will be used for and who will be processing it.<\/p>\n<p>The website also includes information on how individuals can enforce their rights under the GDPR, such as the right to erasure.<\/p>\n<h2>Security audit<\/h2>\n<p>We have reviewed our security procedures to ensure that our systems are robust and personal data is safeguarded.\u00a0We have a policy in place for reporting a data breach.\u00a0Our employees are instructed that if anyone becomes aware of a data breach, it should be reported to the Chief Technical Officer immediately.<\/p>\n<p>As we have fewer than 250 employees, we are not required to appoint a Data Protection Officer. Instead, the management of our data protection procedures and policies is the responsibility of the Chief Technical Officer, who is a board-level director.<\/p>\n<p>&nbsp;<\/p>\n<div id=\"downloads\">\n<ul>\n<li><a href=\"https:\/\/etlsolutions.com\/wp-content\/uploads\/2021\/08\/GDPR-Checklist.docx\">Download our GDPR checklist for data managers<\/a><\/li>\n<\/ul>\n<\/div>\n<div id=\"downloads\">\n<ul>\n<li><a href=\"https:\/\/etlsolutions.com\/wp-content\/uploads\/2021\/08\/GDPR-guide.pdf\">Download our &#8216;Really Quick Guide to the GDPR&#8217; for your team<\/a><\/li>\n<\/ul>\n<\/div>\n","protected":false},"excerpt":{"rendered":"This article sets out the steps that we are taking to ensure our company complies with the European Union&#8217;s General Data Protection Regulation (GDPR). This regulation is designed to protect an individual\u2019s personal data. In addition to giving citizens control of their personal data, the GDPR also aims to unify data protection laws across the&#8230; <a class=\"view-article\" href=\"https:\/\/etlsolutions.com\/our-approach-to-gdpr\/\">View Article<\/a>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_mo_disable_npp":"","footnotes":""},"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/pages\/6029"}],"collection":[{"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/comments?post=6029"}],"version-history":[{"count":17,"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/pages\/6029\/revisions"}],"predecessor-version":[{"id":7328,"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/pages\/6029\/revisions\/7328"}],"wp:attachment":[{"href":"https:\/\/etlsolutions.com\/wp-json\/wp\/v2\/media?parent=6029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}