SIMPLE GDPR DOCUMENT
Date: 2026-10-25
1. Business
Company / Organization:Nyttio Demo LtdRegistration number:556688-4321Address:1 High Street, LondonContact person:Anna AndersonEmail:info@nyttio.sePhone:08-123 45 67
2. Controller
We are the controller for personal data processed in our business.
3. Processing of personal data
| Purpose | We process customer contact details to deliver our services, manage customer relationships and send relevant information. |
|---|
| Legal basis | Performance of a contract |
|---|
| Categories of data subjects | Customers, suppliers and contact persons |
|---|
| Categories of personal data | Names, contact details, email, phone number and address |
|---|
| Retention period | For as long as necessary for the purpose or required by law |
|---|
4. Sharing and processors
Do we share personal data with third parties?: Yes
Recipients and processors: Our IT provider (cloud service) and email provider
Processors shall only process data on our documented instructions and be bound by written data processing agreements.
5. Security
We use password protection, access controls, encryption, regular backups and updated systems.
Security measures shall be proportionate to processing risks and reviewed regularly. Personal data breaches shall be documented and, where required, reported without undue delay.
6. Data subject rights
Data subjects can contact us by email and we will help them exercise their rights under the GDPR.
Data subjects may request access, rectification, erasure, restriction, portability or object to processing where the conditions of the GDPR are met.
7. Review
This document shall be reviewed when processing, suppliers, legal bases or retention periods change and regularly as part of the business's data protection work.
