GDPR
What is Vaam doing to comply with GDPR?
Section titled “What is Vaam doing to comply with GDPR?”Vaam treats GDPR compliance as a top priority. Vaam continuously analyzes and maps personal data flows, reviews external providers, confirms that legally adequate data processing agreements are in place, and adapts routines and processes to protect data and handle related requests and questions.
Vaam treats data protection and GDPR compliance as a critical part of its ongoing processes and includes them in development work. This helps keep Vaam’s services always in line with any legal requirements for processing personal data and makes GDPR compliance as easy as possible for customers.
How do you handle a request for deletion or change (rectification)?
Section titled “How do you handle a request for deletion or change (rectification)?”The data subject should first direct the request to the controller. For example, you are the data controller for videos you record. Anyone with a request about those videos should direct it to you. Vaam may act only on instructions from the data controller.
Vaam works with and guides customers to help ensure that all data on the platform complies with GDPR.
Does Vaam have a data protection officer (DPO)?
Section titled “Does Vaam have a data protection officer (DPO)?”The GDPR requires a DPO when a data processor’s core activities include processing operations that, because of their nature, scope, or purposes, require regular and systematic monitoring of data subjects on a larger scale. It also requires a DPO when a processor’s core activities include processing special categories of data on a large scale.
Neither description fully applies to Vaam. Vaam’s core activity is processing personal data, including video. Vaam does not process special categories of data on a larger scale, and its processing does not constitute regular and systematic monitoring of data subjects, especially not on a large scale.
Vaam receives continuous legal counsel about its data processing responsibilities. If Vaam’s situation changes and a DPO becomes required for GDPR compliance, Vaam intends to take the necessary steps.
How do you work with privacy by design and privacy by default?
Section titled “How do you work with privacy by design and privacy by default?”Privacy by design and privacy by default concern technical and organizational security measures for processing personal data. They cover both processing routines and development that provides privacy by default.
Examples include automated functions for erasure, automatic pseudonymization, and access logging for personal data.
Vaam applies these principles in all development work and considers customer compliance requirements in that work.