GDPR and Data Protection Compliance Statement for Cardonet

GDPR and Data Protection Compliance Statement

Cardonet places a high priority on protecting and managing data in accordance with the GDPR and Data Protection standards. As a business, we remain committed to high standards of information security, privacy and transparency.

We are also committed to working closely with our customers and potential customers to help them meet their obligations through the provision of professional services, such as becoming their appointed data protection officer.

GDPR Compliance Statement for Cardonet IT Support

Cardonet's GDPR and Data Protection Preparation

As part of our GDPR and Data Protection process, we regularly review all our internal processes, procedures, data systems and documentation. We make updates as required and constantly look to further enhance our data security in time.

Our GDPR and Data Protection Principles:

We will process all personal data fairly and lawfully.
We will only process personal data for specified and lawful purposes.
We will endeavor to hold relevant and accurate personal data, and where practical, we will keep it up to date.
We will not keep personal data for longer than is necessary.
We will keep all personal data secure.
We will endeavor to ensure that personal data is not transferred to countries outside of the European Economic Area (‘EEA’) without adequate protection.

Going forward:

We will help our customers understand their responsibilities under GDPR and Data Compliance, as well as help support their compliance needs.

Our GDPR and Data Protection Actions:

We regularly review and update our range of policies, including our Data Breach Policy, Business Continuity Plans and Subject Access Requests.
We regularly review and update our privacy policy on our website to incorporate our GDPR obligations.
We regularly review the personal data we store, manage, maintain, collect, process and control.
We provide training to our team and have generally raised the awareness and importance of GDPR and Data Protection to our business.
We hold both ISO 9001 and ISO 27001 Information Security accreditations and work consistently to retain those.
We continually look at ways of improving our systems and procedures to ensure that we comply with GDPR and Data Protection best practise as a minimum.