GDPR at Elvaco
The General Data Protection Regulation (GDPR), which comes into force on May 25, 2018, is a change for many companies including Latour Industries AB and its subsidiaries. We do not only see it as a legal requirement but an opportunity for us to review internal processes and implement appropriate technical and organizational measures that strengthen our business.
GDPR gives us an opportunity to review our internal routines, to strengthen our personal data protection and an opportunity to change our companies for increased efficiency, increased customer value and ultimately increased profit for our owners.
Implementation and organization
Being part of Latour Industries gives Elvaco the possibility to take advantage of services supplied by our owner. Regarding GDPR, Latour Industries has appointed a project manager or DPM (Data Protection Manager) for the introduction of GDPR and Elvaco have in turn nominated a DPC (Data Protection Contact). The purpose is to coordinate the work to effectively introduce GDPR at Elvaco. Through this setup, Elvaco can benefit from economies of scale and standardize processes and procedures for all entities within the Latour Industries AB business unit.
Latour Industries DPM informs, advises, coordinates and monitors the introduction of GDPR. And Elvaco will in turn implement the necessary changes as well as introduce the support systems needed to meet or exceed the requirements of the new legislation.
Excerpt from Elvaco's GDPR policy
Personal information that will be treated
Elvaco will work on the principle of data minimization and only collect the personal data necessary to conduct our business.
Purpose of treatment of personal data
The purpose of processing personal data will in all cases be defined. No personal data will be processed without a clarified purpose.
Legal basis for treatment of personal data
Elvaco will in all cases define the legal basis for processing personal data.
Time period for treatment and storage
We will only process or store personal data as long as there is a purpose for the data or, for example, when there are legal requirements for storing personal data.
Third-party treatment and transfer of personal data
Personal data will be handled in some cases by third-party sub suppliers. Agreements will always be established, and we will strive to avoid transfer of personal data to non-EU or EEA countries.
If you have further questions regarding GDPR and our implementation, you are welcome to contact the following persons:
Data Protection Contact
Data Protection Manager
Latour Industries AB