Privacy

The GDPR requires Overcast to put in place appropriate technical and organisational measures to implement the data protection principles effectively and safeguard individual rights. This is ‘data protection by design and by default’.

In essence, this means we integrate or ‘bake in’ data protection into our processing activities and business practices, from the design stage right through the lifecycle.

1. We consider data protection issues as part of the design and implementation of systems, services, products and business practices.
2. We make data protection an essential component of the core functionality of our processing systems and services.
3. We anticipate risks and privacy-invasive events before they occur, and take steps to prevent harm to individuals.
4. We only process the personal data that we need for our purposes(s), and that we only use the data for those purposes.
5. We ensure that personal data is automatically protected in any IT system, service, product, and/or business practice, so that individuals should not have to take any specific action to protect their privacy.
6. We provide the identity and contact information of those responsible for data protection both within our organisation and to individuals.
7. We adopt a ‘plain language’ policy for any public documents so that individuals easily understand what we are doing with their personal data.
8. We provide individuals with tools so they can determine how we are using their personal data, and whether our policies are being properly enforced.
9. We offer strong privacy defaults, user-friendly options and controls, and respect user preferences.
10. We only use data processors that provide sufficient guarantees of their technical and organisational measures for data protection by design.
11. When we use other systems, services or products in our processing activities, we make sure that we only use those whose designers and manufacturers take data protection issues into account.
12. We use privacy-enhancing technologies (PETs) to assist us in complying with our data protection by design obligations