Understanding GDPR
In 2016, the European Commission approved and adopted the new General Data Protection Regulation (GDPR). GDPR is a significant change in data protection regulation in the EU and replaces the existing legal framework (the Data Protection Directive and the various member state laws). It will come into effect from May 25, 2018 onwards.
Why is GDPR Important?
GDPR introduces many new rights and obligations regarding how companies should protect individuals' data that they process. It intends to strengthen and unify data protection for individuals by increasing enforcement and creating a tiered penalty structure for breaches.
We have reviewed the rules and policies and are taking the required steps to become compliant.
Reprosify's GDPR Compliance Actions
Our compliance and information security teams have got together to prepare our services for GDPR. We reviewed our data processing operations, and have made the necessary changes to our product and service. We have made changes in key areas including data protection, user rights management, and security enhancements.
What is Personal Data?
Under the GDPR and as used in these Disclosures, "Personal Data" means information related to an identified or identifiable natural person who is identified or identifiable, directly or indirectly by means of reference to any particular identifier like name, identification number, location data, a web-based identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
Reprosify may be responsible under the GDPR as the "controller" of your Personal Data.
What Personal Data is Collected?
In the last 12 months, Reprosify has collected the following categories of Personal Data:
-
Individual Identifiers: Names, street addresses, email addresses, and other similar information
-
Employment Application or Recruitment Records: Special categories of information under the GDPR, used only with express consent
-
Professional Records: Business and employment records or other professional information
-
Other Personal Data: Data from service requests or social media content
-
Cookies and Other Network Information: Analytics data on Website activity
-
Geolocation Data: General geographic location based on log data
-
Sensory Information: Notes, recordings, audio files, images, or video footage
How is Personal Data Used?
Under the GDPR, Reprosify may only use your Personal Data if it has a proper reason for using your Personal Data. Reprosify may use the Personal Information identified above as necessary in pursuit of legitimate business purposes including providing services, communicating with you, improving our business, preventing security breaches, and complying with legal requirements.
When is Personal Data Disclosed?
In the last 12 months, Reprosify has not sold any Personal Data about you but may have disclosed Personal Data to Reprosify partners or suppliers for business purposes as necessary to assess and improve services, measure advertising success, detect fraudulent activities, or promote products and services in accordance with applicable laws.
Your GDPR Rights
The Right to Access
Request copies of your Personal Data that Reprosify has in its possession
The Right to Rectification
Correct any mistakes or discrepancies in your Personal Data
The Right to be Forgotten
Request deletion or restrict processing of Personal Data under certain circumstances
The Right to Data Portability
Receive your Personal Data in a portable format for reuse
The Right to Object
Object to processing of your Personal Data for direct marketing purposes
Right to Opt Out of Automated Decision Making
Not be subject to decisions based solely on automated processing
How to File a GDPR Complaint
While Reprosify hopes to resolve any questions or concerns, the GDPR affords you the right to file a complaint with a supervisory authority of competent jurisdiction in the particular European Economic Area state where you work or reside, or where any alleged infringement of your rights under the GDPR occurred.
