GDPR - General Data Protection Regulation

In addition to the policies and procedures mentioned above that ensure individuals can enforce their data protection rights, we provide easy to access information about each individual’s right to access any personal information that Ethical GmbH processes and to request information about our related data processes

Although in keeping with GDPR provisions Ethical GmbH does not need to appoint a formal Data Protection Officer a named individual has been tasked with receiving and managing complaints. This includes but is not limited to seeking legal advice and deciding on corrective and, if applicable, preventive actions.

Ethical's preparation affected Information Audits, Policies and Procedures (Data Protection, Data Retention and Erasure, Data Breaches, International Data Transfers, Third-Party Disclosures) Legal Basis for Processing, Privacy Notice/policies, Obtaining Consent, Direct Marketing, Data Protection Impact Assessments (DPIA), Processor Agreements, Special Categories Data.

Ethical GmbH understands that continuous employee awareness and understanding is vital to the continued compliance of the GDPR and have involved our employees in our preparation plans. We have implemented an employee specific training program that has been provided to all employees and became part of our induction and annual training program.

We revised our information security policies and procedures aimed to protect personal information from unauthorized access, alteration, disclosure or destruction. We have furthermore in place several layers of security measures, including: SSL Encryption, Access controls, Password policy enforcement, Data encryptions, Authentication, Firewalling.