General Data Protection Regulation Compliance Statement

On May 25^th 2018, the General Data Protection Regulation (GDPR), is due to take effect. The GDPR imposes new rules on companies, government agencies, non-profits, and other organisations that offer goods and services to people in the European Union (EU), or that collect and analyse data tied to EU residents. The GDPR applies no matter where you are located.

Our Commitment

ERIKS is committed to the preservation of its reputation and integrity through compliance with applicable laws, regulations and ethical standards in each of the markets in which it operates. All employees are expected to adhere to these laws, regulations and ethical standards, and management is responsible for ensuring such compliance.

ERIKS are committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have a robust and effective data protection program in place which complies with existing law and abides by the data protection principles.

ERIKS are dedicated to safeguarding the personal data as both a Data Controller and Data Processor. Our preparation and objectives for GDPR compliance have been summarised in this statement and include the development and implementation of new data protection roles, policies, procedures, controls and measures to ensure maximum and ongoing compliance.

What are ERIKS UK & Ireland doing?

ERIKS as a ‘Global’ organisation have undergone an extensive project to address the GDPR principles and how it impacts our Regions, Employees, Suppliers and Customers.

ERIKS UK & Ireland have taken the following steps to further the stringent data privacy controls already in place:

Assurance

ERIKS UK & Ireland conduct regular internal and external company-wide audits to identify and assess what information we process, how and where it is processed, and who has access.

Data Collection

ERIKS UK & Ireland have undergone further assessments to understand, classify and validate what personal data we process, and regularly update our Data Asset Register.

Data Retention

ERIKS UK & Ireland have updated the Data Retention policy and reviewed all schedules to ensure the ‘data minimisation’ principle is applied and personal data is kept for no longer than is necessary for the purposes for which it is being processed. 

Policies & Procedures

ERIKS UK & Ireland have reviewed all applicable privacy policies and procedures to ensure they are aligned to GDPR, all policies and procedures are reviewed on a periodic basis.

Awareness

All ERIKS UK & Ireland staff have access to and have been enrolled on applicable education and awareness learning modules prior to May 25th 2018. This will ensure that all ERIKS UK & Ireland employees are aware and understand how vital it is to comply with the GDPR regulations.

Subscription Centre

ERIKS UK & Ireland have created a subscription centre: https://eriks.co.uk/subscribe

This allows customers and suppliers to update their options so that they receive relevant communications from ERIKS UK & Ireland. The subscription centre has a clear opt-in process allowing us to obtain proof of the time and date. It also allows customers and suppliers the ability to withdraw consent at any time.

Privacy Policy

Our current privacy policy is located on our website: https://eriks.co.uk/en/about-eriks/privacy-and-cookie-policy.html

This privacy policy has been updated to ensure it complies with the GDPR regulations.

Information Security

Cyber security is a growing concern for many businesses, and one we take very seriously at ERIKS UK & Ireland. We have strong cyber security measures in place means that we are not only protecting ourselves but our suppliers and customers as well. We have dedicated Security professionals and use a managed service for our Security Operations Centre.

GDPR Roles & Responsibilities

At group level ERIKS (Head Quarters in Utrecht, Netherlands) has appointed a Group Data Protection Officer – The Group Ethics & Compliance Director.

ERIKS UK & Ireland have designated regional Data Privacy Officer – Ethics & Compliance Manager, who is responsible for day-to-day regional/country specific issues. The Data Privacy Officer is supported by departmental Privacy Champions.

For any additional queries concerning how ERIKS UK & Ireland market to our customers or if you have any question about our preparations for GDPR, please contact:

Data Protection Compliance Officer
ERIKS Industrial Services
Amber Way, Halesowen, B62 8WG

Email: Data.Protection@eriks.co.uk