GDPR Policy

1. Introduction

Buopso is committed to protecting the privacy and personal data of our customers, employees, and other individuals with whom we interact. This GDPR Policy outlines our approach to compliance with the General Data Protection Regulation (GDPR) and our commitment to safeguarding the rights and freedoms of data subjects.

2. Scope

This policy applies to all personal data processed by Buopso Company, regardless of the location of the data subjects or the means by which the data is collected, stored, or processed.

3. Data Collection and Process

Personal data is collected lawfully, fairly, and transparently. We ensure that individuals are informed about the purpose of data processing and their rights regarding their personal data.

4. Data Security

We implement appropriate technical and organizational measures to ensure the security of personal data. Access to personal data is restricted to authorized personnel who require access to perform their job duties. We have procedures in place to respond to data breaches in accordance with GDPR requirements.

5. Data Protection Impact Assessments (DPIAs)

We conduct DPIAs for high-risk data processing activities to assess and mitigate any potential risks to the rights and freedoms of data subjects.

6. Rights of Data Subjects

Buopso recognizes and respects the rights of data subjects under the GDPR, including but not limited to the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing. Data subjects may exercise these rights by contacting us.

7. Data Protection Officer (DPO)

Buopso has appointed a Data Protection Officer (DPO) to oversee our GDPR compliance efforts and serve as a point of contact for data subjects and supervisory authorities.

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, Buopso Company will notify the relevant supervisory authority and affected data subjects without undue delay, in accordance with our obligations under the GDPR.

9. Training and Awareness

Buopso Company provides regular training and awareness programs to employees involved in the processing of personal data to ensure they understand their responsibilities under the GDPR and are equipped to handle personal data securely and compliantly.

10. Review and Updates

This GDPR Policy will be reviewed regularly to ensure its effectiveness and compliance with applicable laws and regulations. Updates may be made as necessary to address changes in our processing activities or regulatory requirements.