Rest assured, Advolt is fully committed to GDPR compliance across every aspect of our business. As a trusted partner of leading brands across the globe, Advolt is dedicated to protecting consumer privacy while generating value for our publisher partners and creating a safe and transparent marketplace for advertisers. As part of this promise to our customers, Advolt is dedicated to helping each and every one of our valued partners ensure they’ve taken the appropriate steps to ensure GDPR compliance.
General Data Protection Regulation (GDPR)
On May 25, 2018, the EU General Data Protection Regulation (GDPR) goes into effect across the European Union. GDPR replaces the 1995 EU Data Protection Directive. It is designed to standardize data privacy laws across Europe, to protect and empower all EU citizens’ data privacy and to reshape the way organizations across the region approach data privacy.
What is GDPR and how does it affect your business?
GDPR is the new regulatory framework that protects the personal data of individuals in the European Union (EU) and must be adhered to by all businesses that collect or process such data.
The GDPR expands the definition of ‘personal data’ to mean any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier. This definition provides for a wide range of personal identifiers to constitute personal data, including name, identification number, location data or online identifier, reflecting changes in technology and the way organizations collect information about people.
The GDPR expands the definition of ‘personal data’ to mean any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier. This definition provides for a wide range of personal identifiers to constitute personal data, including name, identification number, location data or online identifier, reflecting changes in technology and the way organizations collect information about people.
The key stakeholders in GDPR are defined as follows
Subject
the user whose data is being controlled or processed.
Controller
the entity that determines the purposes and means of processing the data.
Processor
the entity that processes personal data on behalf of the controller.
The GDPR places legal obligations on both the controller and processor as follows
If you are a processor, GDPR places specific legal obligations on you; for example, you are required to maintain records of personal data and processing activities. You will have legal liability if you are responsible for a breach.
However, if you are a controller, you are not relieved of your obligations where a processor is involved – GDPR places further obligations on you to ensure your contracts with processors comply with GDPR.
GDPR applies to processing carried out by organizations operating within the EU. It also applies to organizations outside the EU that offer goods or services to individuals in the EU.
Failure to comply with GDPR can result in strict penalties for non-compliant companies. As a trusted custodian of your data (either as a controller or a processor), Advolt is fully committed to compliance and to helping you on your GDPR compliance journey.