For this reason, we decided to assign a data protection officer who has been in charge of checking various actions that have had to be carried out, including the creation of a registry of treatments, as required by the GDPR Article 30. This has been incorporated into the risk analysis of the company, along with other assets, in order to carry out a data protection impact assessment.
In addition, as in other years, a number of improvement goals were proposed for 2019, always maintaining our values like security by default and design, which is a requirement presented in Article 25.
Any question related to data protection can be sent to the following e-mail: dpo@perseivivarium.com.
AENOR is the Spanish certification entity for management systems, products, and services, and is responsible for the development and dissemination of Spanish standards.