StorifyMe & GDPR

What is GDPR?

The EU General Data Protection Regulation, better known as GDPR, is one of the most comprehensive privacy and security laws in the world, effective as of May 25, 2018. This regulation was implemented by the EU to harmonize data privacy laws across Europe; protect and empower all EU citizens’ data privacy; give people more control over their personal data, and reshape the way organizations approach data privacy.

At StorifyMe, we have worked hard to become GDPR compliant, as this new regulation affects us too. Given the importance of GDPR regulations for our customers, partners, and other relevant stakeholders, this page aims to promote transparency, understanding, and on-going updates on how StorifyMe is approaching GDPR compliance—now and in the future.

Who does GDPR apply to?

GDPR applies to any entity or company that processes personal data as part of business activities within the EU. Additionally, the regulation is also applied when an organization is not established in the EU, but still offers products/services and/or is monitoring the behavior of individuals within the EU.

How does GDPR affect data transferred outside of the EU?

GDPR allows personal data to be processed outside of the EU when specific arrangements are made to ensure an adequate level of data protection. StorifyMe has data processing agreements in place with its relevant processors and controllers (including Standard Contractual Clauses for data transfers between EU and non-EU countries) to help safeguard situations whereby personal data is transferred to third countries which do not ensure the appropriate level of data protection.

Rules that companies/entities must adhere to

Personal data must be processed in a lawful and transparent manner; there must be specific purposes for processing the data and those purposes must be indicated to individuals when collecting their personal data; only the personal data that is necessary to fulfil a purpose can be collected; personal data cannot be stored longer than necessary for the purposes for which it was collected; and organizations must install appropriate technical and organizational safeguards that ensure the security of the personal data.

How does StorifyMe comply with the GDPR?

Whether we are offering our StorifyMe solution to customers, contracting with suppliers, or hiring new people: StorifyMe collects, uses, processes, transfers, and stores personal data.

StorifyMe identifies all the personal data that is being processed and defines the purpose of this processing in order to determine how the collected data is used, and provide appropriate visibility and transparency.

StorifyMe has been developing systems and procedures to implement GDPR principles into our system, data, and business practices.

Additionally, considering data privacy also requires strict data security, StorifyMe has implemented processes and procedures to ensure the necessary security levels, i.e. encryption and anonymization of personal data; the creation of processes for data breach notification activities, and the advancement of employee awareness.