Velos IoT Jersey Limited

General Data Protection Regulation (GDPR) Statement

GDPR programme

The General Data Protection Regulation (GDPR) is a new data protection law, approved by the European Commission in April 2016. It therefore applies to all EU Member States from 25th May 2018.

The data protection relationship with Velos IoT

Dependant on the nature of the services we are providing you, Velos IoT may therefore act as a data controller or as your data processor.

When we are acting as data controller (so for example, when providing telecommunications services) we will ensure that our personal data processing activities comply with the obligations laid out within the GDPR.

If we are ever processing personal data on your behalf as a data processor (for example, when providing certain managed services) then we will also work with you to ensure that the processing is GDPR compliant.

If you are unsure about what data protection role Velos IoT is playing when providing you with your services, then please contact your account manager for more specific advice.

Velos IoT privacy programme

Velos IoT has developed policies, procedures, controls and also measures to ensure continued compliance with the GDPR and its principles. Consequently, this includes staff training, policy documents, audit measures and assessments.

Ensuring and maintaining the security and safety of personal and/or special category data belonging to the individuals with whom we deal is paramount to our company ethos. Velos IoT adheres to the GDPR legislation and its associated principles in all processes and functions.

Privacy by design

Velos IoT has implemented the ‘Privacy by Design’ methodology for product and service development. This enables us to ensure compliance with any privacy requirements, in compliance with GDPR.

For further information on our approach, policies and procedures, please review our privacy policy.