In April 2016, the European Commission approved and adopted the new General Data Protection Regulation (GDPR). The GDPR is the biggest change in data protection laws in Europe since the 1995 introduction of the European Union (EU) Data Protection Directive. The GDPR aims to strengthen the security and protection of personal data in the EU and replaced the Directive and all local laws relating to it.
With our growing base of European clients we welcome the arrival of the GDPR. The new requirements raised the bar for data privacy, security, and compliance, and help to make people’s data more secure. We are happy to inform our users and customers that all Ava services are compliant with the GDPR. Following are several steps we have taken towards supporting all of our customers.
A Data Protection Officer for Ava in Europe
Today Ava's Data Protection Officer is Adrien Doumergue. You can email our legal team using our contact email: compliance@ava.me.
Enhanced data deletion feature
The GDPR empowers “data subjects,” the individuals from whom the data has been collected, to control who has their data. Today, Ava provides the option to see/modify or delete your data upon request, by emailing our DPO at compliance@ava.me.
Comprehensive review of vendors
We know we have an important responsibility when it comes to doing due diligence on the vendors we use to help us provide our services to our customers. All our vendors have undergone a thorough privacy and security review by Ava legal team. We’ve also ensured your data is stored with an industry leader with a robust security program and appropriate security certifications.
Putting Data Processing Agreements (DPAs) in place
Strong data protection commitments are a key part of GDPR’s requirements. Our data processing agreement sets out the terms for Ava to meet GDPR requirements and helps us to establish data processing agreements with all our data processors.
Putting you in control of your data
It's extremely important for us to allow any customer to fully understand what our terms are and what they are giving consent for. In our efforts to follow the requirements set out by the GDPR, we have made each request for consent extremely intelligible and easily accessible through clear, plain, and concise language. Furthermore, we detail each purpose of any data collection we do, and make easy for any user to withdraw their consent.
What we are doing on a daily basis for your security
Beyond addressing the new requirements set out by the GDPR, at Ava we are determined to continuously raise the bar in protecting our users from any data breaches or outside threats. To find out about existing commitments we have made, and the actions we have taken towards ensuring this security, shoot us an email and ask for a copy of our most recent Security White Paper.
Questions?
If you would like more information or have follow-up questions please reach out to us at compliance@ava.me