GDPR

The General Data Protection Regulation has been in force since 25 May 2018. Get in touch for the free GDPR check of your website.

From 25 May 2018 the General Data Protection Regulation (GDPR) applies across Europe. Every organisation that processes personal data has to deal with it. If your organisation does not meet the requirements set out in the new legislation, that can lead to hefty fines.

What does my organisation need to do?

For this new legislation, every organisation has to take stock properly of the steps needed to comply with the GDPR. Within the organisation there has to be a clear picture of which personal data is collected, for what purpose that happens, whether that data is stored securely and whether it is also deleted in good time. The General Data Protection Regulation is not limited to your customers' data; employee data falls under the new legislation too.

Across the whole organisation you will therefore have to look at what happens to personal data, who can view that data and who it is shared with. In some cases you even have to appoint an employee as data protection officer . As an internet agency, Digital Impact focuses on the following points:

• Cookie and privacy statements (for (behaviour) tracking of visitors)
• Processing of personal data for customer websites
• Privacy by design

Where to start?

As an organisation you can get going yourself with the step-by-step plan drawn up by the Dutch Data Protection Authority. An important part of it is ‘Step 8: Processor agreements’. As your online partner, Digital Impact takes various measures to protect and process data as well as possible, but a processor agreement does have to be in place. Digital Impact arranges that processor agreement through the Service Level Agreement (SLA).

The GDPR check

If your organisation had everything in order on 25 May 2018, you do not have to worry about any fines. Your organisation then has the following:

• A correct cookie/privacy notice
• Analytics tools configured correctly
• Measures within the organisation to protect data
• Processor agreements with every party that processes data for the organisation
• Privacy by design: asking users for consent explicitly
• A clear overview of the personal data that is collected and for what purpose
• A clear procedure for reporting data breaches
• Recorded consent from users to collect and process data

What does Digital Impact do for customers?

The most important parts of the new privacy legislation are covered in Digital Impact's Service Level Agreement. Every customer with us has a Basic SLA. The Service Level Agreement contains all the information a customer needs to know while using the application delivered. Within the Basic SLA, Digital Impact covers the matters below.

If your organisation has specific requirements around the GDPR, Digital Impact is happy to discuss them with you. Should you have other questions about the General Data Protection Regulation and the Service Level Agreement you hold, please feel free to contact us.

What does this mean for you?

The General Data Protection Regulation (GDPR) gives people (citizens) more scope to stand up for themselves when their personal data is processed. It means your privacy rights are strengthened and extended, with more say over your personal data to safeguard your privacy. Previously this was decided country by country; given that the whole world is connected through the internet, it was decided to draw a clear line.

What does this mean for Digital Impact?

We have to be able to demonstrate through documents that we have taken the right organisational and technical measures to comply with the GDPR. That lets us show we take our responsibility to protect your data and that we handle your data transparently, lawfully and purposefully.

You can find more information about the GDPR on the following sites:

General information on the GDPR   Accountability obligation 

For urgent questions about privacy legislation you can email: privacy@digitalimpact.nl