GDPR

GENERAL DATA PROTECTION REGULATION POLICY

Updated: October 2023

On the 25^thof May 2018 the European data protection legislation that replaces the existing 1995 EU Data Protection Directive will come into force. This legislation is known as General Data Protection Regulation (GDPR).

GDPR strengthens the rights that individuals have regarding personal data relating to them and seeks to unify data protection laws across Europe, regardless of where that data is processed.

Where Katalysis Net acts as a Data Processor

For the purpose of the GDPR regulation Katalysis Net Ltd will act as a data processor for any data that has been provided, uploaded or transferred to our servers. Any client uploading this data will be classed as the data controller.

Where Katalysis Net acts as a Data Controller 

For the purpose of the GDPR regulation Katalysis Net Ltd will act as the data controller for any data that was provided during the ordering and general account management process. This includes any data held for marketing purposes.

Data Physical Locations

Data provided to Katalysis Net is stored solely in the UK at the following locations.

Primary Data Centre Spectrum House Clivemont Road Maidenhead SL6 7FW	Secondary Data Centres Virtus Enfield Crown Road Enfield EN1 1TH BioPark Broadwater Road Welwyn Garden City AL7 3AX
Personal Data Digital Location 129 Trowley Hill Road Flamstead Herts AL3 8DS	Office Location Censeo House St Peters Street St Albans Herts AL1 3LF

Type of Data

GDPR legislation applies to any data that can identity a living person including but not limited to email address, postal address and phone number.

Data Processing Agreements

Our data processing commitments are set within our Privacy Policy.

Deleting Data

Any data you delete from our servers will be deleted immediately or  where the data is backed up then within 30 days. On cancellation of services, data will be destroyed within a maximum period of 180 days. Any customer data may be retained for up to 6 years to satisfy legal obligations. Katalysis Net may keep your email address on file should you opt into our marketing materials.

Data Breach

Under GDPR it is the responsibility of the data controller (the Katalysis Net client) to report a data breach to the Information Commission although Katalysis Net, as the data processor, will assist in the breach notification.

Glossary

Data Subject	A living person or individual
Data Controller	The organisation that collects and determines how the information will be processed, i.e. a Katalysis Net client.
Data Processor	An organisation that receives information from the data controller, i.e. Katalysis Net Ltd.
Personally Identifiable Information (PII)	Information that can identify a living individual
Supervisory Authority	The authority responsible for enforcing the regulation within a specific territory. In the UK it will be the Information Commission’s Office (ICO).
Individual Rights	The rights that empower the individual.
Data Breach	Intentional or accidental loss/damage to information.