{"id":4781,"date":"2017-12-22T10:38:24","date_gmt":"2017-12-22T10:38:24","guid":{"rendered":"http:\/\/vwo.com\/?page_id=4781"},"modified":"2024-02-19T11:41:06","modified_gmt":"2024-02-19T06:11:06","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/vwo.com\/compliance\/gdpr\/","title":{"rendered":"VWO and the GDPR"},"content":{"rendered":"
\n

VWO’s commitment to data privacy and protection<\/h2>\n

VWO has always honored its users\u2019 rights to data privacy and protection. Over the years, we\u2019ve demonstrated our commitment to this by consistently exceeding industry standards. We don’t need to collect and process users\u2019 personal information beyond what is required for the functioning of our products, and this will never change. We have a privacy-conscious culture here, and GDPR is an opportunity for us to strengthen this even further.<\/p>\n<\/div>\n

\n

What Is the GDPR?<\/h2>\n

The General Data Protection Regulation (GDPR) is one of the biggest legislative changes made since 1975. To be effective from May 25, 2018, the primary goal of these changes is the protection of personal data and rights of EU residents.<\/p>\n

GDPR is an EU-wide privacy and data protection law that regulates how EU residents’ data is protected by companies and enhances the control the EU residents have, over their personal data.<\/p>\n

The GDPR is relevant to any globally operating company and not just the EU-based businesses and EU residents. Our customers\u2019 data is important irrespective of where they are located, which is why we have implemented GDPR controls as our baseline standard for all our operations. GDPR has taken effect from 25th May 2018.<\/p>\n<\/div>\n

\n

Data Privacy and Information Security Certifications<\/h2>\n

We have been certified for the following certifications to ensure GDPR preparedness:<\/p>\n

    \n
  1. ISO 27701:2019 Privacy Information Management System [PIMS] & GDPR Regulation Compliance<\/a>:\u00a0<\/a>ISO 27701 is internationally recognized and built as an extension of the widely-used ISO\/IEC 27001 and ISO\/IEC 27002 standards for information security management. It is a global privacy standard that focuses on the collection and processing of personally identifiable information (PII). This standard was developed to help organizations comply with international privacy frameworks and laws.<\/li>\n
  2. ISO 27001:2013 Information security management systems [ISMS]:\u00a0<\/a>ISMS ensures a systematic approach to managing sensitive company information so that it remains secure. ISMS includes people, processes, and IT systems by applying a risk management process.<\/li>\n
  3. System and Organization Controls 2 Type II (SOC 2 Type II)<\/a>: SOC 2 Type II is a rigorous auditing standard developed by the American Institute of CPAs (AICPA). It ensures that companies have established and maintained effective controls to protect the security, availability, processing integrity, confidentiality, and privacy of customer data.<\/li>\n<\/ol>\n<\/div>\n
    \n

    VWO Embraces GDPR<\/h2>\n

    VWO has put in place processes and procedures to comply with the various provisions of GDPR\u2014data subject rights, GDPR core principles, data protection addendum, data deletion, data retention, and pseudonymization, which align with our core values of customer trust and data privacy.<\/p>\n<\/div>\n

    \n

    What steps did VWO take to become GDPR- ready?<\/h2>\n

    Over the past few years, we have covered a lot of ground toward understanding and analyzing how GDPR will impact our customers and making appropriate changes to our product and processes. This was made possible with the help of a focused group comprising experts on Corporate Security and Compliance and members from our senior leadership. Below is a glimpse of our analysis and the steps we took to ensure we are compliant well in time:<\/p>\n

    We have acted on many fronts to adhere to this new regulation.<\/p>\n