GDPR Compliance

Overview

On May 25, 2018, the European Union (the “EU”) implemented a new data privacy and protection regulation, called the General Data Protection Regulation (the “GDPR”). This regulation aims to standardize data protection laws across the EU and also lay down standards to be observed worldwide while processing of personal data originating in the EU; The GDPR also has a strong emphasis on affording individuals stronger, more consistent rights to access and control their personal information.

At Digy4 Inc. (“Digy4”), we take compliance of data privacy and security regulations very seriously. For GDPR, we are working diligently to ensure that we are compliant with the rules laid out by the law. In the following sections, we have outlined our approach to comply with the GDPR.

Digy4 GDPR Compliance

Digy4 offers various products and solutions to its clients which assist clients to conduct various testing related quality assurance, user experience testing, AI/ML, Big data and cloud testing. Our products, solutions, services and website are used and explored by our clients (existing and prospective), we at Digy4 process certain amount of personal information of our clients (existing and prospective) in the capacity of a Data Controller (for any personal information submitted on the website) and in the capacity of a Data Processor (for any personal information provided by our clients when they use our services).

Risk Assessment

We have performed a company-wide information discovery exercise to identify and assess what personal information we hold, where it comes from, how and why it is processed, and to whom it is disclosed.

Data Subject Consent

As a Data Controller, Digy4 has updated its Privacy Policies as per the requirements of GDPR on its https://www.digy4.com and it requires all the visitors, users of its websites to provide consent for use of personal information. Digy4 also allows such users to exercise their rights in relation to their personal information such as modification, rectification, deletion of their data. As a Data Controller we execute contracts required under the GDPR with our data processor to ensure that the data processor process the personal information as per the GDPR. Additionally, we implement technical and organizational security measures to ensure compliances. As a Data Processor we comply with the required safeguards pertaining to safety of personal information received from our clients.

Data Subject Rights and Transfer of Data Outside EU

Digy4 has in place an article 28 GDPR-compliant data processing addendum including the EU Model Clauses to ensure an appropriate legal basis for data transfers outside the EU.

Data Retention and Erasure

We have formulated an internal data protection compliance policy that includes the data retention schedule to ensure that we comply with the ‘data minimization’ and ‘storage limitation’ and other such principles under the GDPR and that personal information is stored, archived, and destroyed in accordance with the GDPR.

Record Keeping as per the GDPR

According to Article 30 of the GDPR, each processor and controller’s representative needs to maintain a record of all activities pertaining to the processing of personal information in such an organization. Digy4 maintains such records as required under Article 30(1) and Article 30(2) of the GDPR.

Data Breach and Mitigation Process

The GDPR has stipulated measures and notifications that must be made upon discovery of a data security breach. Digy4 has put in place internal measures to minimize the risk of any data security breach happening. However, in the unlikely event of any such breach happening, Digy4 intends to honour its responsibilities as laid down under the GDPR, which includes notifying in a timely manner, its customers, and the supervisory authorities. In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours unless not feasible, along with affected data subjects when required.

Digy4’s Promise on GDPR

At Digy4, maintaining the security, integrity, safety and confidentiality of personal data in our possession is of the highest priority. Digy4 has already taken adequate measures to ensure that we fulfil our promise of being fully compliant with GDPR. In case you have any queries, please feel free to reach us at [email protected].