GDPR Data Protection Policy

Last updated: July 5, 2023

Introduction

The General Data Protection Regulation (GDPR) is a regulation enacted by the European Union to strengthen and unify data protection for individuals within the EU. It provides EU residents greater control over their personal data and imposes strict requirements on organizations that collect, process, or store such data.

ABM Demand is committed to complying with GDPR requirements and ensuring transparency in how personal data is collected, used, shared, and protected.

GDPR Principles and Transparency

We adhere to the GDPR principles of lawfulness, fairness, and transparency. All information related to data processing is made easily accessible, clear, and written in plain language to help individuals understand how their data is handled.

Scope of This Policy

This policy applies to ABM Demand and covers personal data relating to customers, prospects, partners, employees, contractors, and other individuals with whom we interact.

Personal data may include names, email addresses, phone numbers, job titles, company details, IP addresses, and other identifiable information.

Lawful Basis for Processing

ABM Demand processes personal data only when there is a lawful basis, including:

Consent
Contractual necessity
Legal obligation
Legitimate business interests

Data Protection Principles

Personal data must:

Be processed lawfully, fairly, and transparently
Be collected for specified, explicit, and legitimate purposes
Be adequate, relevant, and limited to what is necessary
Be accurate and kept up to date
Be retained only as long as necessary
Be processed securely to prevent unauthorized access or loss
Not be transferred outside the EEA without adequate safeguards

Data Security and Storage

We implement appropriate technical and organizational measures to protect personal data, including access controls, secure servers, encryption where required, regular backups, and security software.

Personal data is not stored on unsecured personal devices and is accessed only by authorized personnel.

Data Accuracy and Retention

We take reasonable steps to ensure personal data is accurate and up to date. Individuals may request updates or corrections at any time. Data is retained only for as long as necessary to fulfill business or legal purposes.

Individual Rights Under GDPR

Individuals have the right to:

Access their personal data
Rectify inaccurate data
Request erasure of data
Restrict or object to processing
Request data portability
Withdraw consent at any time
Object to automated decision-making
Lodge complaints with a supervisory authority

Exercising Your Rights

Requests related to personal data may be submitted by contacting us using the details below. Identity verification may be required before fulfilling requests.