- Reorganise the privacy team, document and keep records of decisions related to privacy made by Nexudus so that Nexudus is accountable for its privacy practices.
- Make sure that Nexudus can honour the rights of European merchants and customers over their personal data, and that merchants can do the same when using Nexudus’ services.
- Make required contractual commitments to merchants and obtain necessary contractual commitments when Nexudus uses a third-party contractor to provide services.
Nexudus Implementation of GDPR
Nexudus has been preparing for the GDPR in the following ways:Policies and Documentation
- Updated Nexudus’ privacy policy to include more information about the rights introduced by GDPR and included more detailed information about how Nexudus processes personal data, as required by Articles 13 and 14 of the GDPR.
- Added a data processing addendum to Nexudus’ online terms of service, as required by Article 28 of the GDPR.
- Implemented a detailed procedure to deal with data subject access requests, deletion requests, and government access requests.