1. Introduction

Calmo Studio ("we", "our", or "us") is committed to ensuring the security and protection of the personal information that we process, and to provide a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles. However, we recognize our obligations in updating and expanding this program to meet the demands of the GDPR.

2. GDPR Preparation

We have taken the steps to ensure our continued compliance with the GDPR:

Information Audit - We have carried out a company-wide information audit to identify and assess what personal information we hold, where it comes from, how and why it is processed, and if and to whom it is disclosed.

Policies & Procedures - We have revised our data protection policies and procedures to meet the requirements and standards of the GDPR and any relevant data protection laws, including:

Data Protection
Data Retention & Erasure
Data Breaches
International Data Transfers & Third-Party Disclosures
Data Subject Access Requests (DSAR)
Privacy by Design
Legal Basis for Processing - We have reviewed all processing activities to identify the legal basis for processing and ensuring that each basis is appropriate for the activity it relates to.

Privacy Notice/Policy - We have revised our Privacy Notice(s) to comply with the GDPR, ensuring that all individuals whose personal information we process have been informed of why we need it, how it is used, what their rights are, who the information is disclosed to, and what safeguarding measures are in place to protect their information.

Data Breaches - Our procedures ensure that we have safeguards and measures in place to identify, assess, investigate, and report any personal data breach at the earliest possible time.

International Data Transfers & Third-Party Disclosures - Where Calmo Studio stores or transfers personal information outside the EU, we have robust procedures and safeguarding measures in place to secure, encrypt, and maintain the integrity of the data.

Data Subject Rights - We provide easy-to-access information via our website of an individual’s right to access any personal information that Calmo Studio processes about them and to request information about:

What personal data we hold about them
The purposes of the processing
The categories of personal data concerned
The recipients to whom the personal data has/will be disclosed
How long we intend to store your personal data for
If we did not collect the data directly from them, information about the source
3. Conclusion

Calmo Studio takes the protection of personal data very seriously and will continue to work hard to ensure compliance with GDPR and other relevant data protection laws. If you have any questions about our GDPR compliance efforts, please contact support@calmo.studio.