GDPR at Picter

What is GDPR?

The General Data Protection Regulation (GDPR) is a new European privacy law that goes into effect on May 25, 2018. The GDPR will apply a single data protection law throughout the EU and govern the way that businesses collect, use, and share personal data about individuals.

Our commitment to privacy at Picter

Picter treats the security of your data with highest priority. We are committed to providing an environment that is safe and secure to all of our customers. Compliance with data privacy, guarantee of highest security standards and transparency of data processing are therefore essential to our service. On this page you will learn more about GDPR, how Picter implements the new requirements that come with GDPR, and which processes and documentations we therefore offer to you.

What is considered as private data?

Any information related to a person, that can be used to directly or indirectly to identify a person is considered as private data. Examples are a name, an email address or bank details. More information on this can be found here.

Who does GDPR apply to?

GDPR regulates the processing by an individual, a company or an organisation of personal data relating to individuals in the EU. Picter is a European company with its main office in Germany. GDPR applies to our company and we are fully committed to compliance in order to create a thorough protection of personal data for all our users, no matter if they reside in the EU or not.

What changes come with GDPR?

The aim of GDPR is to protect the privacy and data of all EU citizens. Some of the key changes are:

1. GDPR applies to any organization anywhere in the world, that processes personal data of EU citizens. That enables a new and wide-ranging protection of personal data for EU citizens.
2. EU citizens have to give their clear consent to the use of their private data. Consent must be provided in an easily accessible form, using clear and plain language.
3. GDPR gives EU citizens the right to:
            a) obtain access to the personal data held about them.
            b) ask for incorrect, inaccurate or incomplete personal data to be corrected.
            c) request that personal data be erased when it’s no longer needed or if processing it is unlawful (right to be forgotten).
            d) receive their personal data in a machine-readable format and send it to another controller (‘data portability’).
            f) object to the processing of their personal data for marketing purposes (right to say no).

You can read more about your new rights as EU citizen here.

What has Picter done to comply?

We established thorough documentation and appropriate response management to make sure that all requests around GDPR can be handled fast and efficiently by our team. We reviewed our processes, updated our Privacy Policy, and signed agreements with third party contractors for compliance with the GDPR. Additionally we trained, and we will continue to train our team, to make sure everyone in the company knows the requirements when it comes to working with personal data. This way we will reach full compliance with GDPR by May 25, 2018.

What is Picter’s role under GDPR?

Under GDPR, Picter operates as a ‘data controller’. A data controller determines the purposes for which and the means by which personal data is processed. As a data controller Picter is responsible for, and is able to demonstrate compliance with, the principles relating to processing of personal data. Since Picter operates as ‘data controller’ we are not required to provide a Data Processing Agreement (DPA).

We are fully aware of our responsibility as a data controller and we do our best to meet the highest security and transparency standards.

Picter Privacy Policy

To understand how personal data is processed at Picter, please read this outline of our Privacy Policy here. The full text of our Privacy Policy can be found here.

How can I contact Picter’s data protection officer (DPO)?

You can reach Picter’s DPO at:

IITR Datenschutz GmbH, Dr. Sebastian Kraska, Eschenrieder Straße 62c, 82194 Gröbenzell, skraska@iitr.de

Do you have more questions?

Please send us an e-mail to legal@picter.com, we are happy to help.