GDPR Statement of Compliance
GDPR Statement of Compliance
Introduction
On May 25, 2018, the new EU General Data Protection Regulation (GDPR) came into force (this includes the United Kingdom regardless of its decision to leave the EU) and will impact each organization that holds or processes personal data. It introduces new responsibilities, including the need to demonstrate compliance, more stringent enforcement and a significant increase in penalties compared to the previous Data Protection Act (DPA) that it superseded.
Simply put, individuals will now have greater say over how, why, where their personal data is gathered, processed and disposed of. Any organization that works with EU residents’ personal data in any manner, irrespective of location, has obligations to protect the data.
If you hold and process personal information about clients, staff, or suppliers, you are legally obliged to protect that information. You must:
- Only collect information that you need for a specific purpose
- Ensure it is relevant and up to date
- Only hold as much as you need, and only as long as you need it
- Allow the subject of the information to see it upon request
- Keep it secure
FABRIFOAM’s Commitment
FABRIFOAM has always honored our customers’ rights to data privacy and protection. We have demonstrated our commitment by adhering to the UK Data Protection Policy and have reviewed our internal policies in order to meet the requirements of GDPR.
FABRIFOAM is, and always has been, committed to high standards of information security, privacy and transparency. We place a high priority on protecting and managing data in accordance with accepted standards. This includes our role as a data processor, whilst also working closely with our customers and partners to meet contractual obligations for our procedures, products and services.
In addition, please view our privacy policy on our website.