It’s the 25th May 2018 the new GDPR laws have come into effect!
The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA.
There has been a lot of confusion with the implementation of the GDPR within companies as to what has been required.
The bulk of the new material is similar, if not identical to present data protection rules but the new regulations aims to strengthen and unify data protection. The new definitions are more detailed and reflect changes in technology with such things as IP addresses etc.
As an employer we have to be clearer about records of personal data and processing activities. If deemed outside of legitimate reasons for processing we will now have to gain consent and therefore provide methods to withdraw consent.
We would like to reassure you that ARC Metalcraft Ltd does not collect personal data for any marketing purposes as we do not do any marketing outside of fundraising opportunities. We will never provide a third party with personal details outside of agreed contractual obligations.
We will not be running a GDPR email consent campaign. The only time we will contact you will be for reasons of contract, legal obligations, vital interests, public interest or legitimate reasons which are reasons for processing data outside of the GDPR ruling.
If in the future we decide to change our company stance on marketing data we will pursue a consent based data procedure, but we currently have no plans to do so as of this time.
Any email correspondence with customers will also provide a clear method for removal from our mailing lists, so long as it is agreed that this information is both personal and not necessary to fulfil our obligations.