Introduction

This GDPR policy outlines Blankspace's commitment to comply with the General Data Protection Regulation (GDPR) to ensure the protection and privacy of personal data of individuals within the European Union, including Belgium.

Scope

This policy applies to all personal data processed by Blankspace, irrespective of the format or location where it is stored or used. This includes data collected through our website, including the use of Google Analytics and AdWords tracking cookies. All employees, contractors, and third parties working with Blankspace are expected to adhere to this policy.

Principles

1. Lawfulness, Fairness, and Transparency: Blankspace shall process personal data lawfully, fairly, and in a transparent manner, ensuring the rights of data subjects are respected.

2. Purpose Limitation: Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

3. Data Minimization: Blankspace shall ensure that personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.

4. Accuracy: Blankspace shall take reasonable steps to ensure the accuracy of personal data and rectify inaccurate or incomplete data without undue delay.

5. Storage Limitation: Personal data shall be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.

6. Integrity and Confidentiality: Blankspace shall ensure the security and confidentiality of personal data through appropriate technical and organizational measures.

Data Subject Rights

Data subjects have the right to request access to, rectification, erasure, restriction of processing, and portability of their personal data.

Data Protection Officer

Blankspace has appointed a Data Protection Officer (DPO) responsible for overseeing the company's data protection strategy and ensuring GDPR compliance.

The DPO can be reached at jamil@blankspace.brussels.

Data Processing Procedures

Blankspace shall document all data processing activities, including purposes, categories of data, recipients, and storage periods, in line with the GDPR requirements.

This includes data collected through Google Analytics and AdWords tracking cookies.

Data Breach Notification

In case of a data breach that is likely to result in a risk to the rights and freedoms of individuals, Blankspace shall notify the Belgian Data Protection Authority (DPA) and affected data subjects within 72 hours.

This includes data breaches related to Google Analytics and AdWords tracking cookies.

Third-Party Processing

Blankspace shall ensure that any third parties processing personal data on its behalf, including services like Google Analytics and AdWords, are GDPR-compliant and have appropriate data processing agreements in place.

Training and Awareness

Blankspace shall provide GDPR training to employees and raise awareness of the importance of data protection and privacy.

Review and Update

This GDPR policy will be regularly reviewed and updated to ensure its effectiveness and compliance with changes in laws and regulations. By adhering to this GDPR policy, Blankspace aims to safeguard the rights and privacy of individuals and ensure GDPR compliance in all data processing activities, including those involving Google Analytics and AdWords tracking cookies