GENERAL DATA PROTECTION REGULATION (GDPR)

PURPOSE

Introtech Solutions is dedicated to protecting the privacy and personal data of our clients, employees, and stakeholders. This GDPR policy outlines our commitment to managing and processing personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws, ensuring that data is handled lawfully, transparently, and securely.

SCOPE

This policy applies to all employees, contractors, and third parties involved in handling, processing, storing, or transmitting personal data on behalf of Introtech Solutions. It covers all data management activities, including the collection, use, storage, transfer, and deletion of personal data, whether electronic or physical, in any location where the company operates.

OUR COMMITMENT

Introtech Solutions is committed to:

  • Collecting and processing only necessary personal data, ensuring it is used solely for lawful and intended purposes.
  • Maintaining data accuracy and securely storing personal data to prevent unauthorized access, alteration, or misuse.
  • Providing transparency about how we collect, use, and protect personal data, clearly communicating these practices with data subjects.
  • Responding promptly to data access requests and supporting individuals’ rights under GDPR, such as the right to access, rectify, erase, or restrict data processing.
  • Implementing appropriate technical and organizational measures to safeguard personal data, including regular data protection training for employees.

REPORTING AND ACCOUNTABILITY

Employees are responsible for adhering to data protection procedures and must report any suspected data breaches or policy violations to the management immediately. Additionally, employees are required to cooperate with data protection audits and evaluations to help identify risks or areas for improvement.

COMPLIANCE AND CONTINUOUS IMPROVEMENT

Introtech Solutions is committed to GDPR compliance, and we review this policy annually to ensure it remains up-to-date with legal requirements. We conduct regular audits, evaluate risks, and improve our data protection practices. The continuous employee training promotes a strong data protection culture within the organization.

Last reviewed: 15/04/2024