GDPR Compliance

Last Updated: 29th Febuary 2024

1. Overview

This page outlines how Simply System Solutions Ltd complies with the General Data Protection Regulation (GDPR). We are committed to ensuring the security and protection of the personal information that we process and to provide a compliant and consistent approach to data protection.

2. Data Controller and Data Processor

Simply System Solutions Ltd acts as both a data controller and a data processor, as defined in the GDPR. The data controller determines the purposes for which, and the manner in which, personal data is processed. The data processor processes data on behalf of the data controller.

3. Lawful Basis for Processing Personal Data

We will only process personal data where we have a lawful basis for doing so. The lawful bases include consent, contract, legal obligation, vital interests, public task, and legitimate interests.

4. Data Subject Rights

Data subjects (individuals) have rights under the GDPR. These include the right to access, rectification, erasure, data portability, and the right to object to processing. We are committed to upholding these rights.

5. Data Protection Impact Assessments (DPIAs)

We conduct DPIAs for high-risk processing activities, taking into account the nature, scope, context, and purposes of processing, as well as the potential risks to data subjects.

6. Data Breach Notification

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will report the breach to the relevant supervisory authority within 72 hours, and where necessary, notify affected data subjects.

7. International Data Transfers

If we transfer personal data to a country outside the European Economic Area (EEA), we will ensure that adequate safeguards are in place to protect the data, in accordance with GDPR requirements.

8. Data Protection Officer (DPO)

We have appointed a Data Protection Officer to oversee our data protection efforts. You can contact our DPO at [DPO contact information].

9. Updates to GDPR Compliance

We may update our GDPR compliance measures and this page to reflect changes in our practices or the law. The updated version will be posted on our website.

10. Contact Us

If you have any questions or concerns about our GDPR compliance, please contact us at +44 (0)20 3870 2880.