GDPR Statement

 


Introduction

 The EU General Data Protection Regulation (GDPR) came into force on 25 May 2018 and superseded the previous Data Protection Act 1998. GDPR will apply despite Brexit, and will impact all organisations that control or process personal data. It will grant data subjects a range of new rights, giving them more control over how their data is used. Organisations will be subject to new responsibilities and obligations, including the need to demonstrate compliance.

What are we doing to ensure compliance?

 At Allpack, we are committed to always protecting and respecting the privacy of individuals and organisations alike. We take our obligations under data protection legislation seriously and understand and welcome the high standards that GDPR promotes and encourages. We will maintain this across our business and with any compliant organisation required in providing any services or supply of products to you.

In readiness for GDPR:

 

  • We are ensuring that our employees are fully aware of the new obligations that GDPR will introduce, and that there is accountability and shared responsibility for ensuring compliance, across the
  • We have conducted an extensive review of all personal data we hold, and have prepared a detailed data roadmap which outlines where this data is held, why we hold it and for how
  • We have analysed the use of any third parties who process data on our behalf, and are updating contractual positions to ensure that we (and our customers) are In addition to this, we have updated our current business terms and conditions to give our customers the assurances required under GDPR.
  • We have updated our existing procedures to ensure we have the tools to maintain compliance with

 

  • We have reviewed our existing marketing practices, and associated consents/other lawful grounds for processing, to ensure that these are transparent, fair and GDPR-ready. We have communicated these practices to our marketing teams across the
Summary

It is our full intention to ensure the processing of data within our business is in accordance with our standard terms and conditions, in line with our privacy policy and adheres to the highest standards of data protection and the new GDPR legislation wherever possible.

Issued Jan 2023