GDPR Policy

GDPR Compliance Policy

At Corporality Events, we are committed to ensuring the protection and privacy of personal data in compliance with the General Data Protection Regulation (GDPR). This policy outlines our approach to GDPR compliance and our commitment to safeguarding the rights of individuals regarding their personal data.

Data Collection and Processing

We collect and process personal data for specific, legitimate purposes, and only to the extent necessary for those purposes. We ensure that individuals are informed about the processing of their data, including the purposes of processing, the legal basis for processing, and their rights regarding their personal data.

Lawfulness, Fairness, and Transparency

We process personal data lawfully, fairly, and transparently. We provide individuals with clear and concise information about how their personal data is processed, including any relevant legal bases for processing.

Data Minimization and Storage Limitation

We collect and store only the personal data that is necessary for the purposes for which it is processed. We retain personal data for no longer than is necessary for those purposes or as required by applicable laws and regulations.

Data Accuracy and Integrity

We take reasonable steps to ensure that personal data is accurate, complete, and up-to-date. We also take appropriate measures to ensure the security and integrity of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Individual Rights

We respect the rights of individuals regarding their personal data, including the rights to access, rectification, erasure, restriction of processing, data portability, and objection to processing. We provide mechanisms for individuals to exercise these rights and respond promptly to any requests in accordance with GDPR requirements.

Data Transfers

We ensure that any transfers of personal data outside the European Economic Area (EEA) are made in compliance with GDPR requirements, including the use of appropriate safeguards such as Standard Contractual Clauses or Binding Corporate Rules.

Data Breach Notification

In the event of a personal data breach, we have procedures in place to detect, assess, and report such breaches to the relevant supervisory authorities and affected individuals, where required by GDPR.

Data Protection Impact Assessment (DPIA)

We conduct DPIAs where necessary to assess and mitigate the risks associated with processing personal data, particularly where processing is likely to result in high risks to individuals' rights and freedoms.

Accountability and Governance

We take responsibility for GDPR compliance and have implemented appropriate policies, procedures, and controls to ensure compliance with GDPR requirements. We regularly review and update our GDPR compliance program to reflect changes in applicable laws and regulations.

Data Protection Officer (DPO)

We have a Data Protection Officer (DPO) who is responsible for overseeing GDPR compliance and acting as a point of contact for data protection authorities and individuals regarding personal data processing activities.

This policy serves as a framework for our GDPR compliance efforts, and all employees and third parties involved in processing personal data on behalf of Corporality Events are expected to adhere to its principles and requirements. If you have any questions or concerns about our GDPR compliance, please contact our Data Protection Officer at connect@corporality.global.