GDPR Compliance

Ensuring data privacy and security is one of the toughest challenges faced by legal authorities in the digital era. The General Data Protection Regulation (GDPR) was first proposed in 2012 and approved by the European Parliament in 2016 to impose legal obligations onto all organizations that handle personal data or offer goods and services to EU data subjects. On May 25th, 2018 the GDPR came into effect compelling companies to be compliant with all legal requirements to protect the data privacy rights of all individuals.

According to the EU data privacy and security law (GDPR), all websites that collect, store and process personal data of the EU data subjects must be compliant with GDPR. Non-compliant websites can be penalized by fines of up to 20 million EUR or up to 4% of a company's annual global turnover.

At 1xINTERNET we offer full support regarding GDPR compliance: from consultancy to implementation. We ensure your website security and transparency in communication in order to build trust between your company and your customers regarding personal data.

According to Article 4 GDPR, “personal data” is defined as any information related to an identified person (or “data subject”). Websites may collect the following personal data: 

• Tracking data - Google Analytics, Matomo (formerly Piwik), etc.

• Newsletter data - Mailchimp, CleverReach, Campaign Monitor, etc.

• Social media data - Facebook, Twitter, Instagram, etc.

• Web forms contact - form, feedback, inquiries, etc.

• User data - login data, purchase data, processing data, etc.

This also includes such identifiers as connection data (IP address and cookies). In accordance with GDPR, companies are required to systematically record, review, adapt and secure all personal data collection and processing operations including its subsequent use by third parties.

In order to comply with GDPR, organizations have to respect the 8 principal rights of data subjects and guarantee a lawful basis for handling their personal data. The General Data Protection Regulation stipulates that all individuals should be sufficiently informed about the collection and processing of their personal data. To achieve this, the privacy policy should be a core feature of your website and include all essential information regarding the use of the personal data of your users. The information should be clear, unambiguous and easily accessible. It should inform users about their rights and your legal obligations with regards to the collection, storage and processing of their personal data.

At 1xINTERNET we always recommend obtaining professional consultancy from your own DPO (Data Protection Officer) or any other empowered organism to ensure your privacy policy includes all necessary information in accordance with GDPR legal requirements.