GDPR & Dataskyddshantering

The EU's data protection regulation (GDPR) entered into force on 25 May 2018 and is supplemented in Sweden by the Data Protection Act (SFS 2018:218). The legislation sets clear requirements for how personal data must be handled — regardless of whether it takes place within an organization or via external service providers. Zorc AB develops and implements digital systems for its customers. In that role, we regularly process personal data on behalf of the customer, which means that we conclude agreements on personal data processing and choose subcontractors with care. This document describes the legal framework, our commitments and how responsibility is distributed in the systems we build.