Data Protection – Ensuring Integrity and Transparency
GELITA established a framework for conducting business activities in a data protection-compliant manner worldwide. This system encompasses a well-structured data protection organization, along with established processes and guidelines.
Data Protection Organization
The central data protection unit within GELITA's Legal, Risk & Compliance function oversees data protection activities, including the development of global processes and requirements. This unit is supported by data protection coordinators and Single Points of Contact Data Protection, while the responsibility for compliance lies with the Group Vice Presidents and the Management Board of GELITA.
Data Protection Processes and Requirements
GELITA has a Group Policy on Data Protection that adheres to European legislation, primarily the General Data Protection Regulation, and incorporates local regulations. This policy is supplemented by country-specific management processes and templates to address data protection topics.
Training, Awareness, and Audits
GELITA emphasizes employee compliance with data protection requirements through regular training and awareness programs, including mandatory webinars. Internal and external audits are conducted to maintain a high standard of data protection management and drive ongoing improvement.