GDPR

General Data Protection Regulation

KTI Limited (or “KTI”) is committed to ensuring that its services comply with the European Union’s newly enacted General Data Protection Regulation (“GDPR”). The GDPR is a law that is designed to ensure European individuals’ rights to privacy and the protection of their personal data. KTI is actively implementing procedures and processes that are designed to ensure that KTI’s outreach to, and collection of data from, European individuals will be fully GDPR compliant.

Under the GDPR, KTI is a “data processor” on behalf of its customers, who are the “data controllers.” KTI will ensure that it solely processes European personal data as permitted by the GDPR, such as facilitating KTI’s services to its customers. The GDPR requires that all processing have a lawful basis, and KTI will be working with its customers to ensure that this lawful basis adequately covers all of KTI’s processing activities. The intent of this collaborative effort is to ensure that both KTI and its customers remain GDPR compliant when KTI’s services involve outreach to, and the collection of data from, European individuals.

Finally, KTI has actively engaged each of its service providers to obtain the necessary assurances that all sub-processing of personal data by those service providers complies with the GDPR. KTI will make information about its subprocessors available to its customers, including notifications regarding any new subprocessors, on this webpage.

KTI will provide further updates and information about its GDPR compliance efforts as needed, in the form of updates on this website. If you have questions regarding KTI’s GDPR compliance, please contact us via the contact us section on our website.

Categories of Subprocessing

Subprocessors assist KTI in a few key areas:

• cloud hosting/storage
• smtp email services
• email automation