Data protection and the GDPR

Introduction

On this page, we have provided information about the General Data Protection Regulation (2016/679) (GDPR) and how EasyPark handles personal data.

What is GDPR?

The GDPR is an EU regulation to harmonize the rules for the treatment of personal data throughout the EU / European Economic Area. The GDPR sets out the requirements for companies and organizations that handle personal data, as well as the rights of individuals.

What is personal data?

Any information relating to a natural person that can be used to directly or indirectly identify the person is considered personal data, e.g. names, photos, phone numbers, email addresses, license plate numbers and GPS coordinates.

What is a data subject?

A data subject is a person to whom the personal data relates.

What is a data controller?

A data controller is the person who (either alone or with others) determines the purposes for which and the manner in which any personal information is, or will be, processed.

Are there any specific rules that companies should follow to ensure compliance?

Article 5 of the EU GDPR sets out the following principles for personal data:

• Lawful, fair and transparent practices
• Only for specified, explicit and legitimate purposes
• Adequate, relevant and limited to what is necessary
• Accurate and up to date. Kept only for the time necessary
• Processed in a manner that ensures appropriate security of personal data

Is the GDPR also applicable outside the EU/European Economic Area?

The GDPR applies not only to organizations based in the EU or the European Economic Area, but also to companies and organizations based outside the EU if they offer goods and services to EU/EEA citizens and process personal data in doing so. The GDPR therefore applies to all companies and organizations that process personal data of data subjects residing in the European Union or the European Economic Area, regardless of the company's location.

How does EasyPark process my personal data?

For more information on how EasyPark handles personal data, please refer to our privacy policy.

What security measures has EasyPark implemented to protect personal data?

EasyPark has implemented an Information Security Management System (ISMS) according to ISO 27001. In addition, EasyPark has hired an Information and IT Security Manager and set up internal control as part of ISMS.

Does the data subject have to give consent to the controller?

A company or organization must have legal grounds for processing an individual's personal data. Legal grounds for processing personal data include, for example, that the processing is necessary to perform an agreement with the data subject, to comply with a legal obligation, or if the data subject has consented to the processing. The data subject must be informed about how the personal data are processed and when permission is required for the processing. For a full description of how EasyPark processes your personal data and the legal basis for the processing, please refer to the EasyPark privacy policy.

Does EasyPark use service providers that process personal data?

Yes, EasyPark has contracts with suppliers that provide services to EasyPark. EasyPark has a data processing agreement with all suppliers that process personal data on behalf of EasyPark.

Contact details of the Data Protection Officer

The contact details of our Data Protection Officer: [e-mail]