GIQCIS is committed to protecting the privacy and integrity of all personal and sensitive data handled in the course of our certification and business activities. This Data Protection Policy Statement outlines our commitment to ensuring that all data is managed securely and in compliance with applicable data protection laws and regulations.
Our Commitments:
- Compliance with Data Protection Laws: GIQCIS is committed to complying with all applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR) and any other relevant local data protection requirements. We ensure that personal data is collected, processed, and stored lawfully, fairly, and transparently.
- Data Security: We implement robust technical and organizational measures to safeguard all personal and sensitive data from unauthorized access, alteration, disclosure, or destruction. GIQCIS ensures that appropriate security protocols are in place to protect data at all times.
- Data Minimization and Accuracy: GIQCIS only collects and processes personal data that is necessary for legitimate business purposes. We are committed to maintaining accurate, complete, and up-to-date data and regularly review and update our records to ensure data accuracy.
- Access Control: Access to personal and sensitive data is restricted to authorized personnel only. We ensure that data is only accessed, processed, or disclosed by those with a legitimate need to know and who are bound by confidentiality agreements.
- Retention and Deletion of Data: GIQCIS retains personal data only for as long as it is necessary to fulfill the purposes for which it was collected or as required by applicable laws and regulations. We have established procedures to securely delete or anonymize data that is no longer needed.
- Rights of Data Subjects: We respect the rights of data subjects, including the right to access, correct, delete, or restrict the processing of their personal data. GIQCIS ensures that individuals can exercise their data protection rights and provides clear guidance on how to do so.
- Employee Training and Awareness: All personnel at GIQCIS receive regular training on data protection principles and practices. We ensure that all employees understand their responsibilities regarding data privacy and the handling of personal data.
- Data Breach Management: GIQCIS has established procedures for detecting, reporting, and managing data breaches. In the event of a data breach, we will act promptly to mitigate the impact and notify the relevant authorities and affected individuals in accordance with legal requirements.
- Continuous Improvement: We are committed to continuously reviewing and improving our data protection practices to ensure ongoing compliance with data protection laws and the highest standards of data privacy.