GDPR

GDPR

Organisations established in the EU and processing personal data of EU-based individuals are, in almost all cases, required to comply with the GDPR from May 25 2018. The GDPR updated and harmonised the framework for processing personal data in the European Union, and brought with it new obligations for organisations and new rights for individuals. Mediablanket has many years’ experience earning our users’ trust.

We are certified compliant with the most widely-accepted security and privacy standards and regulations, such as ISO 27001/2, ISO27018/17 and SOC 2.

What is the GDPR? The GDPR is a European Union regulation that established a new framework for handling and protecting the personal data of EU-based residents. It came into effect on May 25 2018. 

Mediablanket Ltd met the requirements of the GDPR prior to the rule change on 25 May 2018. How will Mediablanket comply with the GDPR? Trust is the foundation of our relationships. We value the confidence that you put in us and take the responsibility of protecting your information seriously. Mediablanket have analysed the GDPR and have undertaken the necessary steps to ensure that we comply.

GDPR: Subject Access Requests.

• Individuals have the right to access their personal data and supplementary information.
• The right of access allows individuals to be aware of and verify the lawfulness of the processing.

What information is an individual entitled to under the GDPR?

Under the GDPR, Mediablanket Ltd give the customer:

• confirmation that their data is being processed;
• access to their personal data; and
• other supplementary information

What is the purpose of the right of access under GDPR?

The GDPR clarifies that the reason for allowing individuals to access their personal data is so that they are aware of and can verify the lawfulness of the processing.

Mediablanket can charge a fee for dealing with a subject access request

We will provide a copy of the information free of charge. However, we can charge a ‘reasonable fee’ when a request is manifestly unfounded or excessive, particularly if it is repetitive.

We may also charge a reasonable fee to comply with requests for further copies of the same information. 

The fee must be based on the administrative cost of providing the information.

How long do we have to comply?

Information must be provided without delay and at the latest within one month of receipt.

Mediablanket can extend the period of compliance by a further two months where requests are complex or numerous. If this is the case, we will inform the individual within one month of the receipt of the request and explain why the extension is necessary.

If your request is manifestly unfounded or excessive

Where requests are manifestly unfounded or excessive, in particular because they are repetitive, we can:

• charge a reasonable fee taking into account the administrative costs of providing the information; or
• refuse to respond.

How will we provide the information

We will verify the identity of the person making the request, using ‘reasonable means’.

Mediablanket may be able to provide remote access to a secure self-service system which would provide the individual with direct access to his or her information. This service is scheduled to be ready in 2019.