Scope of the certificate
Recognition granted by OZONIA expressing an organisation’s compliance with data protection regulations in relation to the obligations applicable to the website it owns.
Accordingly, the organisation’s website:
- Complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter the GDPR.
- The website owner is the data controller. Users may exercise their rights through the channels provided by the controller.
- Has approved and published a Data Protection Policy in accordance with the GDPR, covering:
- Its duty of confidentiality regarding the personal data processed in its files.
- Its duty to adopt the security measures required by regulations to prevent, as far as possible, alteration, loss, unauthorised processing of or access to personal information.
- Its identification as data controller and easy access to exercise the rights of access, rectification, objection, portability and/or erasure of personal data.
- In addition, the data controller has included a legal notice in the website’s forms to fulfil its information obligations and expressly request users’ freely given and informed consent.