Textmagic Commitment to GDPR and Data Protection Compliance
The General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”) is a key piece of data protection legislation applicable across the European Union. Following the United Kingdom’s withdrawal from the European Union, a substantially equivalent version of the GDPR was incorporated into UK law (“UK GDPR”). Textmagic is committed to maintaining compliance with both frameworks and to protecting personal data in accordance with applicable data protection laws.
The most up-to-date Textmagic data protection documents
What is Textmagic doing about the GDPR?
Textmagic is committed to maintaining high standards of privacy and data protection. Since the introduction of the GDPR, we have continually reviewed and enhanced our policies and procedures to support compliance with applicable data protection requirements, including the EU GDPR and the UK GDPR.
Protecting the privacy of our customers, their users and other individuals whose personal data we process remains an important priority for us. Below is an overview of measures that form part of our ongoing data protection and compliance programme:
| Action | Status |
|---|---|
Thoroughly research the areas of our product and our business impacted by GDPR. |
Completed |
Appoint a Data Protection Officer. |
Completed |
Develop a strategy and requirements for how to address the areas of our product impacted by GDPR. |
Completed |
Rewrite our Privacy Policy to be compliant with GDPR. |
Completed |
Rewrite our Terms of Service to be compliant with GDPR. |
Completed |
Pass the data protection audit and get the official confirmation letter of Textmagic’s full GDPR compliance. |
Completed |
Perform the necessary changes/improvements to our product based on the requirements. |
Completed |
Implement the required changes to our internal processes required to achieve compliance with GDPR. |
Completed |
Thoroughly test all of our changes to verify and validate compliance with GDPR. |
Completed |
Finalize and communicate our full compliance. |
Completed |
Textmagic continues to work with experienced external legal advisers and data protection professionals to monitor legal developments and support its ongoing compliance efforts. We regularly review our practices and documentation to ensure they remain aligned with applicable data protection requirements and industry best practices.
A Brief Overview of the GDPR
The GDPR establishes a framework for the protection of personal data and sets out requirements for organizations that process personal data.
Personal data includes any information relating to an identified or identifiable individual. The GDPR provides individuals with important rights regarding their personal data, including the right to access their data, request corrections, request deletion in certain circumstances, object to certain processing activities and, where applicable, request data portability. At the same time, the GDPR requires organizations to implement appropriate technical and organizational measures to ensure that personal data is processed lawfully, fairly, transparently and securely.
Key GDPR requirements include:
- Individual rights:
The GDPR provides individuals with a range of rights in relation to their personal data, including the right to access personal data, request its rectification or erasure in certain circumstances, and, where applicable, request data portability. - Compliance obligations:
The GDPR requires organizations to implement appropriate policies, procedures and security measures, maintain records of processing activities, assess privacy risks where required, and enter into appropriate contractual arrangements with service providers and other third parties. - Data breach notification and security:
The GDPR requires organizations to implement appropriate technical and organizational measures to protect personal data and, where required, report personal data breaches to supervisory authorities and affected individuals. - Regulatory enforcement:
Data protection authorities have powers to investigate compliance and may impose administrative fines and other corrective measures for infringements of applicable data protection laws.
If you have any questions, please don’t hesitate to contact us.