This website uses cookies to give you a better experience. For more information on why we use cookies, please read our cookie policy
Accept cookies
Skip to main content
Hastings Online logo
A-Z
Home | Help | Privacy | Log in to My Hastings | Jobs Email alerts Hastings council Instagram Hastings council twitter feed Hastings council facebook page
  • My council
  • Freedom of Information
  • Requests and responses by date
  • FOI request (FOI-66644006)

    GDPR

    Requested Thu 25 January 2018
    Responded  Mon 05 March 2018

    1. How would you describe your GDPR preparedness?

    a. Already Compliant.

    b. On target to be compliant by May 25th, 2018.

    c. Project underway but suffering difficulties.

    d. Barely Started.

    e. Haven't started.

    2. Have you identified all your data processing partners?

    a. Yes

    b. No

    c. Unsure

    3. Do you have contracts in place with all your data processing partners?

    a. Yes

    b. No

    c. Unsure

    4. Do you use a third party to provide data erasure or destruction services on your end of life IT infrastructure?

    a. Yes

    b. No

    c. Unsure

    5. If you use a third party, do you have a contract in place with them?

    a. Yes

    b. No

    c. Unsure

    6. How have you assessed "sufficient guarantees" from this company? (Please tick all that apply)

    o In writing from them.

    o Via Contract Terms.

    o Relevant accreditation.

    o Independent Assessment / audit.

    7. Does this contract include clarification on process for dealing with: (Please tick all that apply)?

    o Breach Notification?

    o Subject Access Requests

    o Changes in processing activities which require a DPIA.

    8. If you use a third party what is their name?

    9. How regularly do you or an independent third party, audit this company?

    a. Never

    b. Every 6 months

    c. Every 12 months

    d. Irregularly but over 12 months

    e. Unsure


    Response

    Q1 - b. On target to be compliant by May 25th, 2018.

    Q2 - a. Yes

    Q3 - a. Yes

    Q4 - a. Yes Hard disks are removed from devices and physically destroyed (shredded) on site.

    Q5 - b. No

    Q6 - Not applicable - The company never has any personal data.

    Q7 - Not applicable - The company never has any personal data.

    Q8 - NCR

    Q9 - Not applicable - The company never has any personal data.

  • Freedom of Information

    Contact

    Got a question about freedom of information? 

    Contact us


    Content

    The content on this page is the responsibility of our Council's Information Officer.

    Can't find what you're looking for? Try our A - Z

    Spotted an issue with this page? Tell us

A-Z of services

  • Services beginning with A
  • Services beginning with B
  • Services beginning with C
  • Services beginning with D
  • Services beginning with E
  • Services beginning with F
  • Services beginning with G
  • Services beginning with H
  • Services beginning with J
  • Services beginning with L
  • Services beginning with M
  • Services beginning with N
  • Services beginning with P
  • Services beginning with R
  • Services beginning with S
  • Services beginning with T
  • Services beginning with U
  • Services beginning with V
  • Services beginning with W
  • Hastings Museum and Art Gallery website
  • Visit 1066 Country website
  • Email alerts Hastings council Instagram Hastings council twitter feed Hastings council facebook page
  • Accessibility statement
  • Contact us
© 2003 - 2023 Hastings Borough Council.
Unless otherwise stated these pages are copyright protected.
All rights reserved.