GDPR Policy – Data Protection

 

The EU General Data Protection Regulation came into force in May of 2018. One of the reasons that the EU introduced the law is to give people more control over their personal data. To prepare for the GDPR, companies have had to think carefully about their data protection and privacy practices. One of the most important requirements for companies that fall under the scope of the GDPR is that they provide transparent and accessible information about the personal data they're processing. The way to do this is by having a clear and comprehensive Privacy Policy.

 

The GDPR covers the "processing" of "personal data." Article 4 (1) of the GDPR defines personal data as information that can be used "directly or indirectly" to identify. This is a very broad definition. Aside from the obvious things like a person's name, it can also include a person's:

• Email address

• Cookie data

• IP address "Processing" is a broad term.

 

The GDPR covers any sort of automated data processing activity or filing (electronic or otherwise). This might include:

• Asking your customers to fill out a contact form on your website

• Storing a list of phone numbers