GDPR

The General Data Protection Regulation (GDPR) is the most significant legislative change in European data protection laws since the EU Data Protection Directive (Directive 95/46/EC), introduced in 1995. The GDPR became enforceable on May 25, 2018, strengthens the security and protection of personal data in the EU and serves as a single piece of legislation for all of the EU. It replaced the EU Data Protection Directive and all the local laws relating to it.

Boei supports the GDPR and all Boei services comply with its provisions. Not only is the GDPR an important step in protecting the fundamental right of privacy for European citizens, it has raised the bar for data protection, security and compliance in the industry.

How Boei handles data subject requests

Data subjects (for example, visitors who interacted with a Boei-powered chatbot) can exercise their rights under the GDPR - including access, rectification, erasure, restriction, portability, and objection - by contacting the Controller whose website they visited, or by contacting Boei directly at [email protected]. Where Boei acts as Processor, we forward the request to the Controller within 5 working days and assist them in responding. Where Boei acts as Controller (for example, for our own account holders), we respond directly, typically within 4 weeks. We verify identity via the email address on file and only request additional documentation when there is a clear indication of fraud.

Breach notification commitment

If Boei becomes aware of a personal data breach affecting Controller data, we notify the affected Controller without undue delay and, where feasible, within 48 hours of becoming aware of the incident. The notification includes the nature of the breach, the categories and approximate number of data subjects and records concerned, likely consequences, and the measures taken or proposed to address the breach. Full details are set out in Article 9 of our Data Processing Agreement.

Data protection contact

For GDPR-related questions, DPA requests, subprocessor queries, or to report a data protection concern, contact us at [email protected]. We aim to respond within 2 business days.