)
General Data Protection Regulation (GDPR) and EasyPark
On this page, we provide information about the General Data Protection Regulation (2016/679) (GDPR) and how EasyPark handles personal data.
What is GDPR?
GDPR is a regulation adopted by the EU to harmonize rules for processing personal data throughout the EU/EEA. It specifies the requirements for companies and organizations that handle personal data and outlines the rights of individuals.
What Constitutes Personal Data?
Personal data includes all information related to a natural person that can be used to directly or indirectly identify them, such as:
- Names
- Photographs
- Telephone numbers
- Email addresses
- Car registration plates
- GPS coordinates
What is a Registrant?
A data subject is an individual to whom the personal data pertains.
What is a Personal Data Controller?
A personal data controller is someone who determines the purposes and means of processing personal data, either alone or in collaboration with others.
Compliance with GDPR
Article 5 of the GDPR states that personal data must be:
- Processed legally, fairly, and transparently.
- Collected only for specified, explicit, and legitimate purposes.
- Adequate, relevant, and limited to what is necessary.
- Accurate and kept up to date.
- Retained only for as long as necessary.
- Processed in a way that ensures appropriate security.
Is GDPR Applicable Outside the EU/EEA?
GDPR applies not only to organizations within the EU/EEA but also to those outside it if they offer goods and services to EU/EEA citizens and process personal data. Thus, GDPR applies to any company processing personal data from individuals in the EU or EEA, regardless of its location.
How Does EasyPark Process My Personal Data?
For more information on how EasyPark processes personal data, please refer to our privacy policy.
What Security Measures Has EasyPark Implemented?
EasyPark has established an Information Security Management System (ISMS) in accordance with ISO 27001. We have also appointed an Information and IT Security Manager and implemented internal controls as part of the ISMS.
Do Data Subjects Need to Give Consent?
A company must have a legal basis to process an individual's personal data. This may include processing necessary to fulfill an agreement, comply with a legal obligation, or obtain the data subject's consent. Individuals should be informed about how their personal data will be processed. For more details, refer to EasyPark's privacy policy.
Does EasyPark Use Suppliers That Process Personal Data?
Yes, EasyPark has agreements with suppliers who provide services and process personal data on our behalf. We have entered into data processing agreements with all such suppliers.
DPO Contact Information
For inquiries, contact our Data Protection Officer (DPO) at: dpo@easypark.net.