What is GDPR?

- The General Data Protection Regulation (GDPR) is a European Union (EU) privacy law that came into effect on May 25, 2018. The GDPR replaces the 1995 Data Protection Directive and is designed to give EU citizens more control over their personal data and to harmonize data protection laws across the EU.

How we Comply with GDPR?

- Obtain valid consent: Weobtainexplicit consent from individuals before collecting or processing their personal data. We inform individuals about the purpose of data collection, how their data will be processed, and obtain their consent through an opt-in mechanism.
- Implement data protection measures: We implement appropriate technical and organizational measures to protect personal data from unauthorized access, disclosure, or misuse. This includes implementing strong data encryption, access controls, and secure data storage.
- Conduct privacy impact assessments: We conduct regular privacy impact assessments to identify and mitigate privacy risks associated with data processing activities.
- Maintaining accurate records: We maintain accurate records of data processing activities and ensure that personal data is processed only for the purposes for which it was collected.
- Responding to data subjects' requests: We respond to individuals' requests to access, correct, or erase their personal data in a timely manner.
- Regularly review and update policies: We regularly review and update our data protection policies and procedures to ensure that we remain compliant with GDPR.