GDPR (General Data Protection Regulation) is a change for many companies including Investment AB Latour and its subsidiaries. We not only see it as a further legal requirement but an opportunity for us to review internal processes and implement appropriate technical and organizational measures that strengthen us as companies.
GDPR gives us an opportunity to review our internal routines, partly to strengthen our personal data protection, but also an opportunity to change our companies for increased efficiency, increased customer value and ultimately increased returns for our owners.
Implementation and organization
Each company within the Group is the person responsible for personal treatment. Investment AB Latour has established an Integrity Policy that applies to the parent company and is indicative and is considered as a minimum requirement for all subsidiaries. Subsidiaries can treat personal data to a greater extent and other than Investment AB Latour and may therefore need a different and / or more comprehensive policy.
Investment AB Latour has appointed a Data Protection Contact (DPC) for the parent company. The subsidiaries have designated their own DMP (Data Protection Manager) or DPC in cases where the company is part of a group of companies where a coordinated DPM is designated. In many cases, the subsidiaries coordinate the work to effectively introduce GDPR in the companies. The benefits can be derived from economies of scale and processes and procedures can be standardized for groups of companies within Investment AB Latour.
We work closely with our subcontractors to ensure that even our external suppliers that affect our business meet the new legal requirements.
Example of how Latour works with GDPR
- PERSONAL INFORMATION THAT WILL BE TREATED
Investment AB Latour works according to the principle of computerization and collects only the personal data necessary to conduct the business or meet the required legal requirements.
- PURPOSE OF TREATMENT OF PERSONAL DATA
The purpose of processing personal data is defined in all cases. No personal data is processed without a clarified purpose.
- LEGAL BASIS FOR TREATMENT OF PERSONAL DATA
Investment AB Latour defines in all cases the legal basis for processing personal data.
- TIME PERIOD FOR TREATMENT AND STORAGE
Personal data is processed or stored only as long as there is a purpose for the data or, for example, when there are legal requirements for storing personal data.
- THIRD PARTY TREATMENT AND TRANSFER OF PERSONAL DATA
Personal data is provided to personal information assistants acting as our subcontractors. Agreements have been drawn up and we strive for the transfer of personal data to non-EU or EEA countries.
- YOUR RIGHTS AS A PRIVATE PERSON
It is offered the possibility of obtaining registries or requesting purification according to GDPR.
If you have further questions regarding GDPR and Investment AB Latour's implementation, you are welcome to contact the following persons.