+44 (0)1484 651144

General Data Protection Regulation (GDPR) Statement

Summary

e-solutions welcomes the introduction of GDPR in May 2018.

e-solutions is committed to high standards of information security, privacy and transparency. We place a high priority on protecting and managing data in accordance with accepted standards.

e-solutions is registered with the Information Commissioner’s Office under registration reference: ZA248463.

In terms of the GDPR e-solutions has been working towards being fully compliant throughout 2017 in order to
ensure that e-solutions customers can be certain that they are dealing with a fully compliant GDPR business. The work will conclude prior to the May 2018 date for introduction of the regulation.

As a company, we are also working towards implementing ISO 27001 and aim to achieve certification by the end of 2018.

Assessment

e-solutions has assessed every paragraph of the GDPR and matched its own activities and products against all of those paragraphs in four key areas. e-solutions considered the regulation against e-solutions as:

  1. A data controller of its own employee data.
  2. A data controller or processor of third party data such as activity relating to direct marketing.
  3. A Software as a Service (SaaS) supplier.
  4. A business that develops software.

A public document will be made available that details the policies and activities that e-solutions employs matched to the clauses of the GDPR should any customer have a detailed question in respect of compliance.

e-solutions will also provide a document that details the features of the SaaS provision that means you can have confidence that the organisation and software you are working with are fully GDPR compliant.

e-solutions is hosted solely from UK data centres.

Activity

e-solutions is amending its activities and associated policies and procedures as necessary in order to fully comply with GDPR following a thorough assessment.

e-solutions is amending its customer and supplier contracts to ensure the GDPR reaches throughout the supply chain for the provision of its SaaS services.

e-solutions is reviewing all of its suppliers for compliance with GDPR paying very close attention to its marketing activity suppliers.

e-solutions is carrying out Privacy Impact Assessments as necessary.

e-solutions will be offering additional cyber security options for customers who feel they would like to increase their monitoring of activity in relation to their own specific system.

The e-solutions website and direct marketing activity is being updated so that customers have the assurance that they will be contacted and treated in accordance with GDPR requirements. The website will contain e-solutions privacy policies clearly identified.

The SaaS platform is being fully reviewed and will be amended if required. The software is already developed under the guidance of e-solutions secure development requirements.

e-solutions will be maintaining accreditations that demonstrate its commitment to information security, including personal data.