GTIS Europe Ltd GDPR Statement
We are committed to protecting the privacy and security of personal data. This document outlines our approach to GDPR compliance within our process. it is designed to ensure we meet the requirements of the GDPR while engaging with potential and existing customers.
We know what personal data we hold and why we need it. We carefully consider and can justify how long we keep personal data. We have a policy with standard retention periods where possible. in line with documentation obligations. We regularly review our information and erase or anonymise personal data when we no longer need it.
We have appropriate processes in place to comply with individuals’ requests for erasure under ‘the right to be forgotten’. We clearly identify any personal data that we need to keep for public interest archiving, scientific or historical research, or statistical purposes.
Lawfulness
We have identified an appropriate lawful basis (or bases) for our processing. If we are processing special category data or criminal offence data, we have identified a condition for processing this type of data. We don’t do anything generally unlawful with personal data.
Fairness
We have considered how the processing may affect the individuals concerned and can justify any adverse impact. We only handle people’s data in ways they would reasonably expect, or we can explain why any unexpected processing is justified. We do not deceive or mislead people when we collect their personal data.
Transparency
We are open and honest and comply with the transparency obligations of the right to be informed. We only collect personal data we actually need for our specified purposes. We have sufficient personal data to properly fulfil those purposes. We periodically review the data we hold and delete anything we don’t need.
GTIS Europe Ltd GDPR Process
When discussing an account with a customer you must confirm 3 pieces of personal information: Full Name / D.O.B / Full address.
Storage Limitation
We know what personal data we hold and why we need it. We carefully consider and can justify how long we keep personal data. We have a policy with standard retention periods where possible, in line with documentation obligations.
We regularly review our information and erase or anonymise personal data when we no longer need it. We have appropriate processes in place to comply with individuals’ requests for erasure under ‘the right to be forgotten’.
Lawfulness, Fairness, Transparency Lawfulness
We have identified an appropriate lawful basis (or bases) for our processing. We don’t do anything generally unlawful with personal data.
Fairness
We have considered how the processing may affect the individuals concerned and can justify any adverse impact. We only handle people’s data in ways they would reasonably expect, or we can explain why any unexpected processing is justified. We do not deceive or mislead people when we collect their personal data.
Transparency
We are open and honest and comply with the transparency obligations of the right to be informed.
Checklist — Data Minimisation
We only collect personal data we actually need for our specified purposes. We have sufficient personal data to properly fulfil those purposes. We periodically review the data we hold and delete anything we don’t need.