As a European and independant company, Lengow welcomes the GDPR as an important step forward to protect data across the EU, as it harmonizes data privacy laws and regulates how companies collect, modify and delete data of EU citizens.
GDPR sets companies in two categories : controllers and processors, according to where they sit in the data collection chain.
Based on its business activity, Lengow is mainly considered as a processor which can process personal data from your prospects and clients. According to the way you use the Lengow platform (basic tracking or marketplace selling), data collected may vary (from IP addresses, to personal data needed to process and ship orders to your clients, such as their first/last name, postal address …) – no sensitive data is collected anyway.
Our various departments have therefore actively worked to guarantee a full GDPR compliance.
What Lengow is doing
We are fully committed to complying with GDPR and our legal experts have closely analysed requirements. As one of your technology provider, Lengow is fully GDPR compliant.
High level of security guarantee
Lengow already employs strict policies and strict procedures around the security of data. As mentioned in our infrastructure and support page, our data are stored exclusively in Europe by ISO27000 certified providers guaranteeing a high level of security.
Internal process
An internal committee with Technical, Product, Finance and Marketing team members was set to centralize privacy topics and processes, identify data types and get the importance of privacy and data protection across to the company.
Besides, team members have been trained by legal and privacy experts.
The access to sensitive data collected is limited to a small number of people among Lengow according to a strict policy.
Register of processing operations
We’re documenting the various processes for collecting and processing personal data across our various departments, clients, partners and providers. In addition, our Terms of services have been updated with a data-specific addendum, which is now mandatory for our clients and guarantee the fulfillment of our obligations. Besides, we are making sure we are part of a compliant ecosystem by checking that any providers we use as sub-processors are also GDPR compliant.
Data Protection Officer
Our DPO ( Data Protection Officer) is available for any questions regarding actions taken et Lengow’s policy towards personal data. Should you have any questions regarding GDPR / Privacy issues, please send an email to DPO@lengow.com.
Contact us
Should you have any questions about GDPR and how it impacts you, as a Lengow client, do not hesitate to contact us: privacy@lengow.com.
