GDPR COMMITMENT STATEMENT

The General Data Protection Regulation replaces the Data Protection Act and came into force on 25th May 2018. Any organisation which processes personal data of EU individuals comes under the GDPR scope wherever they are located in the world.

This document outlines the steps J&L (The creators of Vacancy Lab) have taken to fulfil obligations under the legislation. To find out more about GDPR, the Information Commissioner Office has more information: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr

Our Undertaking

J&L takes our obligations to keep data secure seriously. As a result, in order to ensure we meet the requirements of the GDPR legislation, we have reviewed our policies to ensure compliance.

Data Protection and GDPR

Definitions:

• Data Controller: determines the purposes and means of processing personal data
• Data Processor: is responsible for processing personal data on behalf of a controller
• 'Personal data' means any information relating to an identifiable person who can be directly or indirectly identified from the data.

In most cases our relationship with you is that you are the Data Controller and Data Processor. J&L Limited provide you tools to help you manage your compliance with the GDPR legislation. However all storage and processing of data is performed on equipment or hosting of your choice. Our systems when used correctly will provide adequate compliance with GDPR requirements.

In the rare case that we take a copy or process your data we will only do so upon the written instructions of your Data Controller; ensuring that people processing the data are subject to a duty of confidence, are aware of their legal responsibilities; take appropriate measures to ensure the security of processing; and destroy all data once the process has been completed.

Third Party and International Transfers

The GDPR imposes restrictions on the transfer of personal data outside the European Union. We are based in the UK and we always aim to store our data within the European Union. We will not transfer data outside of the European Economic Area or to a Third Party without your written consent. However, some organisations which provide services to us such as hosting or backups may transfer personal data outside of the European Union. We will only allow them to do so if your data is adequately protected.

Summary

This document is intended to clarify our undertakings and your responsibilities under the GDPR legislation. Should you wish to obtain any more information please contact enquiries@jandl.digital or telephone: 01293 127128