1. Policy Statement

• 1.1 General Data Protection Regulation (GDPR) came into effect on 25th May 2018 with the objective of harmonising data protection law framework across the EU. GDPR imposes obligations on companies that control or process personal data.
• 1.2 Anderson Acoustics has implemented appropriate technical and security processes to ensure that we comply with these GDPR obligations.
• 1.3 We will provide practical advice and training to both new and existing employees to make them aware of our GDPR obligations.
• 1.4 We will continually monitor our internal processes to ensure that the Regulation is complied with. Every executive, manager and employee have a responsibility to follow and implement this Policy.

2. Privacy and Data Protection

Our Privacy & Data Security Policy details how we collect, process, share and utilise personal data, and how we apply data protection principles.

3. IT Data Security

• 3.1 Our IT infrastructure is Cyber Essentials certified which provides assurance that internet connections, devices and software are secure, that access to data and services is controlled, that systems are protected from viruses and other malware, and that our devices and software are kept up to date.
• 3.2 We use exclusively cloud based systems and data storage from Tier 1 suppliers to ensure the physical security of our client’s data.
• 3.3 We will continually monitor our IT data security measures and will seek re-assessment from time to time to maintain our Cyber Essentials accreditation.

4. Organisation Liability

Anderson Acoustics recognises the risks to its business from non-compliance and that we will be held liable for any subsequent penalties imposed as a result of our non-compliant actions.

5. Clear Communication

We will clearly communicate our GDPR compliant measures in relation to Privacy and IT Data Security to all employees, business partners, agents and any other third parties in order to promote this Policy.

6. Date of Implementation

This Policy is effective from 6th December 2019 and shall not apply to any actions that occurred prior to this date.

7. Questions

Any questions regarding this Policy and our Privacy & Data Security Policy should be addressed to the Director responsible for Legal Affairs.

8. Alteration of this Policy

This Policy will be subject to review, revision, change, updating, alteration and replacement to ensure we continue to comply with the Regulation and any amendments made to it.

Reviewed on 1st July 2026