Back to Trust Center

GDPR

Compliant

General Data Protection Regulation

Full compliance with the European Union's General Data Protection Regulation for protecting personal data and privacy.

Overview

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. We have implemented comprehensive measures to ensure compliance with all GDPR requirements, including data subject rights, lawful processing, and international data transfers.

Scope

  • All personal data processed by HiNow
  • EU and EEA customer data
  • Employee and contractor data
  • Marketing and communications data

Controls

  • Data Processing Agreements (DPA)
  • Standard Contractual Clauses (SCCs)
  • Data subject access request handling
  • Right to erasure implementation
  • Data portability support
  • Privacy by design principles
  • Data Protection Impact Assessments
  • Breach notification procedures