Though AloIT physically are not working in EU countries, we have customers in the region who require us to be GDPR compliant. We ensure the requirements of GDPR compliance by ensuring following actions:

• Lawful processing: We only collect or store personal data for processing when it is necessary for the performance of a contract, compliance with a legal obligation, protection of vital interests, the performance of a task carried out in the public interest, or the exercise of official authority, or legitimate interests pursued by the data controller or a third party.
• Consent:  We ensure that individuals provide a clear and informed agreement for the processing of their personal data.

• Data subject rights: We do grants rights to individuals, including the right to access, rectify, and erase their personal data. Data subjects also have the right to object to certain types of processing, restrict processing, and data portability.

• Data breach notification: We notify the relevant supervisory authority of a data breach within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

• Privacy by design and default: We take measures of integration of data protection into the development of systems, products, and services. We have implemented privacy by design principle to ensure that data protection is considered from the outset.

• Data protection officer (DPO): We have assigned the DPO roles to our Head of Operations to ensure that necessary controls are in place and functioning.

• International data transfers: If personal data is transferred outside the EU, AloIT ensure that an adequate level of protection is maintained by masking, encryption and implementing standard contractual clauses, binding corporate rules etc.