GDPR Policy

The GDPR is an EU Regulation to improve the protection of the personal data of EU citizens and increase the obligations of organizations who collect or process personal data. These new regulations took effect on the 25th of May 2018.

The regulations greatly enhance the data privacy and security of our customers and extend to them exercisable rights enabling greater control over one's personally identifiable information. Today, data protection law impacts organizations and governments around the world.

The EU implemented a higher protection threshold than most other countries with the introduction of General Data Protection Regulation (GDPR) in 2018. GDPR introduced changes to previous data protection and data privacy law, specifically around areas like consent, reporting obligations, internal procedures, accountability, and penalties.

Data privacy and data protection both deal with the processing of data. Data protection focuses on protecting assets from unauthorized use, while data privacy defines who is authorized to access the data in the first place.

One important difference is who controls which part. With data privacy, controls are mostly given to the user (in other words, the user can control which data is shared with whom), while data protection is mostly a company's responsibility.

Personal data is defined as any data that can be linked back to a natural person. Everything you do online - from creating a Facebook account to posting a photo on Instagram - leaves a digital footprint.

While it may seem small, it adds up and unprotected, an individual is vulnerable to having their personal data shared with third parties. Luckily, data privacy law focuses on ensuring an individual's rights are secure.

Yes, GDPR applies to you too even if you are located outside of the EEA (European Economic Area). It applies to any business that:

• Markets their products to people in the EEA
• Monitors the behavior of people in the EEA

In other words, even if you're based outside of the EEA, if you control or process the data of EU citizens, GDPR applies to you.

Alami is hosted on Amazon Web Services (AWS). The servers where Alami data is stored are located in Ireland (eu-west-1 region).