Continuing our tradition of data protection
The protection and security of clients' data has always been a high priority at S2B Online. Something more, data protection is one of the building blocks of our area of service which has naturally inbuilt a GDPR-compliant manner of working across everyone from the team.
We will regularly update this page to keep you in the loop about our continuous efforts and the implementation of new techniques that protect and respect your rights as an individual and as a business.
In the meantime, should you have any questions related to your rights under GDPR or our compliance, please do not hesitate to get in touch with us at enquiries@s2bonline.net.
What is GDPR and why is it important?
The GDPR (General Data Protection Regulation) is a new EU Regulation which will replace the 1995 EU Data Protection Directive (DPD). Its ultimate aim is to further enhance the protection of the personal data of EU citizens and increase the accountability of organisations who collect or process personal data. The GDPR regulation came into force on 25th May 2018 and applies to all organisations which conduct business in the EU and collect or hold personal data of european individuals no matter where around the globe the organisation itself is located...
What is S2B Online doing?
We take our responsibilities under the GDPR very seriously, which is why we have adopted an organisation-wide GDPR Compliance programme. As part of its methodology, we are continuously reviewing our privacy policy, data processes and practices to ensure that we are fully compliant with the legal requirements and that our clients' data is safe, secure and relevant. Below you can see a summary of what we have done so far:
• We have identified the areas of our software and business services that are impacted by GDPR – COMPLETE
• We have reviewed and made the necessary changes to our Privacy Policy where GDPR is applicable – COMPLETE
• We have reviewed and made the necessary changes to our Terms and Conditions where GDPR is applicable – COMPLETE
• We have acquired Data Processing Agreements with our third party providers– COMPLETE
• We have made sure that our contracts with third party vendors, who are processing personal data on our behalf, have been updated and are GDPR compliant- COMPLETE
• We have identified and implemented the required changes to our internal processes and procedures to ensure full compliance with the GDPR requirements – COMPLETE
• We have conducted an in-depth data mapping exercise by creating flowcharts that track how we obtain and process our clients data - COMPLETE
• We have communicated our GDPR compliance procedures with our clients and ensured they are informed about the ways they could exercise their rights regarding the personal data we hold about them – COMPLETE
• We have started internal education training across key areas of our business to make sure that all team members dealing with clients' data are knowledgeable about data protection best practices and how GDPR impacts their day-to-day responsibilities - COMPLETE
• We have updated our Data Security Information page which contains information about our data centers, compliance and layers of security - COMPLETE
Personal data and your rights:
The individual rights are an integral part of our data protection processes and we always make sure that our clients are informed how to exercise them.
Under the GDPR law you have the right to be informed, the right to access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability and the right to object.
Please don't hesitate to email us if you have any questions with regards to your individual rights under GDPR- as always, we are here to help!