My Buddy AI recognizes the importance of the protection of natural persons with regard to the lawful processing of their personal information as a fundamental right. In that respect, the Company complies with the principles of personal information lawful processing, respects the rights and freedoms of the data subjects and secures that the possessed personal information is:
- Collected for specified, explicit and legitimate purposes, which are stated at the Company/Organization's Record of Processing Activities, and are also collected after data subject's consent, when necessary,
- Are processed only for the purposes for which they have been collected and / or for legal and regulatory reasons and / or for the defense of the Company's legal interest or Organization's public interest,
- Not further processed in a manner that is incompatible with the specified purpose(s),
- Adequate, relevant and limited to the minimum data required in relation to the specified purpose(s),
- Subject to legal processing according to data subjects' rights, they are accurate, and, where necessary, kept up to date, particularly before taking critical decisions concerning the data subjects,
- Not retained for longer than is necessary for the purposes for which the data were collected or for which they are further processed or for compliance of the Company/Organization with legal and regulatory requirements,
- Retained secure from unauthorized access, unauthorized modification, loss or breaches,
- Transferred to third parties provided that secure level of data protection is ensured.
The above-mentioned are followed by all of the Company's employees and third parties that process personal information of natural persons on behalf of the Company.
The Company ensures full compliance with all the above by:
- Applying working instructions concerning a) Data Privacy by Design & Data Privacy By Default, b) Role Determination for a Personal Information Processing, and a PDPR 01 Data Privacy Impact Assessment, for monitoring and controlling the implementation of this policy, as well as effectiveness assessment regarding the regulatory framework and best practices for personal information protection,
- Informs data subjects regarding the processing of their personal information as well as how to exercise their rights
- Ensuring that data transmission to and processing by third parties on behalf of the Company complies with the regulatory framework for data protection as well as with the current policy,
- Designing, adopting and monitoring a system of indicators and objectives for secure and lawful personal information management,
- Investing in continuous staff training and awareness on personal information issues as well as in constant improvement of know-how and its sharing with the staff,
- Sharing the policy with all the employees continuously updating this policy according to the applicable regulatory and legislative framework
My Buddy AI is committed to continuously monitor and enforce the regulatory and legislative framework and to continuously implement and improve the effectiveness of the Privacy Information and Information Security Management System.
