Digital Marketing that Drives Results - Offices in Bristol & London
0117 428 6812 || 📧 hello@koredev.co.uk
Let's Talk
0117 428 6812||📧 hello@koredev.co.uk
Let's Talk

Kore Dev: GDPR Compliance Policy

  1. Purpose

The purpose of this GDPR Compliance Policy is to ensure that Kore Dev adheres to the General Data Protection Regulation (GDPR), protecting the privacy and personal data of individuals within the European Union (EU). This policy outlines the principles and procedures Kore Dev follows to ensure compliance with GDPR requirements.

  1. Scope

This policy applies to all employees, contractors, freelancers, interns, and any other individuals processing personal data on behalf of Kore Dev. It covers all personal data processed by Kore Dev, regardless of the format or medium.

  1. Key Definitions
  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Processing: Any operation performed on personal data, such as collection, storage, use, transfer, or deletion.
  • Data Subject: An individual whose personal data is processed.
  • Data Controller: The entity that determines the purposes and means of processing personal data.
  • Data Processor: The entity that processes personal data on behalf of the Data Controller.
  1. GDPR Principles

Kore Dev adheres to the following GDPR principles when processing personal data:

4.1. Lawfulness, Fairness, and Transparency

  • Process personal data lawfully, fairly, and in a transparent manner.
  • Provide clear and transparent information to data subjects about how their data is processed.

4.2. Purpose Limitation

  • Collect personal data for specified, and legitimate purposes.
  • Do not process personal data in a manner that is incompatible with those purposes.

4.3. Data Minimisation

  • Ensure that personal data collected is adequate, relevant, and limited to what is necessary for the intended purposes.

4.4. Accuracy

  • Keep personal data accurate and up-to-date.
  • Take reasonable steps to correct or delete inaccurate personal data.

4.5. Storage Limitation

  • Retain personal data only for as long as necessary for the purposes for which it was collected.
  • Implement appropriate measures to securely delete or anonymise personal data when it is no longer needed.

4.6. Integrity and Confidentiality

  • Process personal data in a manner that ensures its security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

4.7. Accountability

  • Demonstrate compliance with GDPR principles and maintain records of processing activities.
  1. Data Subject Rights

Kore Dev respects and upholds the following rights of data subjects:

5.1. Right of Access

  • Allow data subjects to access their personal data and obtain information about how it is processed.

5.2. Right to Rectification

  • Enable data subjects to correct inaccurate or incomplete personal data.

5.3. Right to Erasure

  • Honor data subjects’ requests to delete their personal data, subject to certain conditions.

5.4. Right to Restrict Processing

  • Allow data subjects to request the restriction of processing of their personal data under certain circumstances.

5.5. Right to Data Portability

  • Provide data subjects with their personal data in a structured, commonly used, and machine-readable format, and allow them to transfer their data to another controller.

5.6. Right to Object

  • Respect data subjects’ rights to object to the processing of their personal data, including for direct marketing purposes.

5.7. Rights Related to Automated Decision-Making

  • Ensure that data subjects are not subject to decisions based solely on automated processing, including profiling, without meaningful human intervention.
  1. Legal Bases for Processing

Kore Dev will only process personal data when there is a lawful basis for doing so, including:

  • Consent: Obtaining explicit consent from data subjects for specific processing activities.
  • Contract: Processing necessary for the performance of a contract with the data subject.
  • Legal Obligation: Processing required to comply with a legal obligation.
  • Legitimate Interests: Processing based on the legitimate interests of Kore Dev, balanced against the rights and interests of data subjects.
  1. Data Breach Management
  • Implement procedures for detecting, reporting, and investigating personal data breaches.
  • Notify the relevant supervisory authority of a data breach within 72 hours, if required.
  • Communicate data breaches to affected data subjects when there is a high risk to their rights and freedoms.
  1. Data Processor Agreements
  • Ensure that all third-party data processors engaged by Kore Dev comply with GDPR requirements.
  • Enter into data processing agreements with all data processors to ensure they process personal data in accordance with GDPR.
  1. Awareness
  • Raise awareness about data protection principles and practices.
  1. Monitoring and Review
  • Regularly monitor compliance with this policy and GDPR requirements.
  • Review and update this policy annually or as necessary to reflect changes in legal and regulatory requirements.
  1. Contact Information

For questions or concerns regarding this policy, or to exercise data subject rights, please contact the Director at:

  • Email: Robert@KoreDev.co.uk
  • Phone: 0117 428 6812

 

Book Now Online
Book a call