GDPR Compliance
Our commitment to protecting your personal data and ensuring full compliance with the General Data Protection Regulation (GDPR) in all our DevOps consulting and cloud transformation services.
100%
GDPR Compliant
< 72hrs
Breach Notification
Your Rights
Fully Protected
1. Our GDPR Commitment
Antony Bailey DevOps Consulting is fully committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We believe that protecting personal data is not just a legal requirement, but a fundamental responsibility in our digital age.
Our Privacy Principles
- Transparency: Clear communication about data processing
- Minimisation: Collecting only necessary data
- Purpose Limitation: Using data only for stated purposes
- Accuracy: Maintaining up-to-date and correct information
- Security: Implementing robust protection measures
- Accountability: Demonstrating compliance at all times
2. Legal Bases for Processing
Under GDPR, we process personal data based on the following lawful bases:
Consent (Article 6(1)(a))
Where you have given clear, specific consent for processing activities such as marketing communications or newsletter subscriptions.
Contract (Article 6(1)(b))
Processing necessary for contract performance, including DevOps consulting services, project delivery, and client communication.
Legal Obligation (Article 6(1)(c))
Compliance with legal requirements such as tax obligations, regulatory reporting, and statutory record-keeping.
Legitimate Interest (Article 6(1)(f))
Business operations, service improvement, security measures, and direct marketing where your interests don't override ours.
3. Your Rights Under GDPR
As a data subject, you have the following rights under GDPR:
Right of Access
Request access to your personal data and information about how it's processed.
Right to Rectification
Correct inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data in certain circumstances.
Right to Restrict Processing
Limit how we process your personal data in specific situations.
Right to Data Portability
Receive your personal data in a machine-readable format.
Right to Object
Object to certain types of processing, including direct marketing.
4. Data Protection by Design and Default
We implement data protection principles from the outset of any project or system design:
4.1 Technical Measures
- Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit
- Access Controls: Role-based access control (RBAC) and multi-factor authentication
- Pseudonymisation: Where possible, we replace identifying information with artificial identifiers
- Data Minimisation: Automated systems to collect only necessary data
4.2 Organisational Measures
- Privacy Impact Assessments: Conducted for all high-risk processing activities
- Staff Training: Regular GDPR training for all team members
- Vendor Management: Due diligence on all third-party processors
- Policy Updates: Regular review and updating of privacy policies
5. International Data Transfers
When transferring personal data outside the UK/EEA, we ensure adequate protection through:
Adequacy Decisions
Transfers to countries recognised by the UK/EU as providing adequate protection.
Standard Contractual Clauses (SCCs)
Legal contracts ensuring appropriate safeguards for data transfers.
Certification Schemes
Transferring to organisations with recognised data protection certifications.
6. Data Breach Management
We have comprehensive procedures for handling data breaches:
Detection & Assessment
Immediate: Identify and assess the severity of any potential breach
Containment
Within 1 hour: Take steps to contain the breach and prevent further data loss
Notification to Authorities
Within 72 hours: Report to the ICO if required by GDPR
Individual Notification
Without undue delay: Inform affected individuals if high risk to their rights
7. Vendor and Third-Party Compliance
All our vendors and third-party processors must meet strict GDPR compliance standards:
- Due Diligence: Comprehensive assessment of data protection practices
- Data Processing Agreements: Legally binding contracts outlining responsibilities
- Regular Audits: Ongoing monitoring of compliance standards
- Incident Reporting: Mandatory breach notification procedures
8. Cloud Service Compliance
Our cloud services and infrastructure partners are selected based on GDPR compliance:
Microsoft Azure
GDPR compliant with EU Data Boundary and comprehensive data protection controls.
Amazon Web Services (AWS)
GDPR Data Processing Addendum and extensive security and compliance certifications.
Google Cloud Platform
GDPR Data Processing and Security Terms with strong data residency options.
9. Training and Awareness
We maintain high standards of GDPR awareness through:
- Initial Training: Comprehensive GDPR training for all new team members
- Regular Updates: Quarterly refresher sessions on data protection
- Specialised Training: Advanced privacy training for data handling roles
- Incident Simulation: Regular practice of breach response procedures
10. Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the following methods:
Send your request to: [email protected]
Contact Form
Use our secure contact form with privacy request option
Phone
Call us during business hours (details provided upon email contact)
Our Response Commitment
- Acknowledgment: Within 48 hours of receiving your request
- Full Response: Within 30 days (extended to 60 days for complex requests)
- No Charge: Most requests are processed free of charge
- Identity Verification: We may request proof of identity for security
11. Complaints and Appeals
If you're not satisfied with how we've handled your personal data or GDPR request:
Step 1: Contact Us
Reach out to our Data Protection Officer to resolve the issue directly.
Step 2: Escalation
If unresolved, we'll escalate to senior management for review.
Step 3: Regulatory Complaint
Contact the Information Commissioner's Office (ICO) if still unsatisfied.
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Email: [email protected]
12. Continuous Improvement
We continuously improve our GDPR compliance through:
- Regular Audits: Annual comprehensive privacy audits
- Policy Reviews: Quarterly review of all privacy policies
- Technology Updates: Implementation of latest privacy-enhancing technologies
- Industry Monitoring: Staying current with regulatory developments
- Client Feedback: Incorporating privacy concerns into service improvements