GDPR Compliance Statement

Welcome to the General Data Protection Regulation (GDPR) Compliance Statement of Ampleberg Group Ltd. At Ampleberg, we are committed to protecting the privacy and personal data of our users, customers, employees, and all individuals who interact with our organization. This GDPR Compliance Statement outlines our policies, procedures, and practices for ensuring compliance with the GDPR requirements.

  1. Introduction to GDPR: The GDPR is a comprehensive data protection law enacted by the European Union (EU) to regulate the processing of personal data and provide individuals with greater control over their personal information. The GDPR applies to all organizations, regardless of location, that process personal data of individuals within the EU.

  2. Data Protection Principles: At Ampleberg Group Ltd, we adhere to the core principles of data protection outlined in the GDPR. These principles include lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality (security); and accountability.

  3. Data Controller and Data Processor: As a data controller, Ampleberg Group Ltd determines the purposes and means of processing personal data. We may also act as a data processor when processing personal data on behalf of our customers or partners. We ensure that all processing activities comply with the GDPR requirements.

  4. Lawful Basis for Processing: We only process personal data when we have a lawful basis for doing so under the GDPR. This may include the necessity of processing for the performance of a contract, compliance with legal obligations, protection of vital interests, consent of the data subject, or legitimate interests pursued by Ampleberg Group Ltd or a third party.

  5. Data Subject Rights: The GDPR grants data subjects certain rights regarding their personal data. These rights include the right to access, rectify, erase, restrict processing, object to processing, data portability, and the right not to be subject to automated decision-making. Ampleberg Group Ltd respects these rights and provides mechanisms for data subjects to exercise them.

  6. Data Protection Impact Assessments (DPIAs): We conduct Data Protection Impact Assessments (DPIAs) to identify and mitigate risks associated with processing activities that may impact the privacy and data protection rights of individuals. DPIAs are conducted for high-risk processing activities as required by the GDPR.

  7. Data Breach Notification: In the event of a personal data breach, Ampleberg Group Ltd follows the GDPR requirements for data breach notification. We notify the relevant supervisory authority and affected data subjects without undue delay, as required by law.

  8. International Data Transfers: If personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect the data, such as Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), or adherence to approved codes of conduct or certification mechanisms.

  9. Data Protection Officer (DPO): Ampleberg Group Ltd has appointed a Data Protection Officer (DPO) responsible for overseeing GDPR compliance efforts, providing guidance on data protection matters, and serving as a point of contact for data subjects and supervisory authorities.

  10. Training and Awareness: We provide regular training and awareness programs to employees who handle personal data to ensure they understand their obligations under the GDPR and how to safeguard personal information effectively.

  11. GDPR Compliance Monitoring and Review: Ampleberg Group Ltd continuously monitors and reviews its data processing activities to ensure compliance with the GDPR requirements. We conduct regular audits, assessments, and reviews of our data protection practices to identify and address any areas for improvement.

  12. Contact Us: If you have any questions, concerns, or requests regarding our GDPR compliance efforts or the processing of your personal data, please contact our Data Protection Officer at info@ampleberg.com or 07300640062..

Thank you for entrusting Ampleberg Group Ltd with your personal data. We are committed to protecting your privacy and complying with the GDPR requirements to ensure the security and integrity of your personal information.