Are you GDPR ready

May. 25 2018

This white paper outlines briefly and accessibly for managers: data protection issues, who is affected by them, who needs to be aware of the EU’s General Data Protection Regulation (EU 2016/679) and touches on the key requirements.


Targeting compliance by using a Data Protection Technical Standard

This white paper outlines briefly and accessibly for managers: data protection issues, who is affected by them, who needs to be aware of the EU’s General Data Protection Regulation (EU 2016/679) and touches on the key requirements. There is also a summary of the main themes of the Bureau Veritas Data Protection Technical Standard, which was developed in order to meet the Regulation’s intended certification approach to simplify and provide greater assurance for achieving GDPR compliance. 

The benefits of a certification approach to target compliance and the next steps to achieving that are also laid out:

  • Demonstrate digital responsibility and target compliance
  • Safeguard your reputation
  • Provide products and services that meet customer demands
  • Address digital risks and opportunities


Your personal data are collected by Bureau Veritas Services, simplified joint-stock company, having its registered office at 8 Cours du Triangle, 92800 PUTEAUX, France, and are subject to computer processing in order to respond to questions from the media about the Group or its subsidiaries on the basis of your consent, and to respond to customer complaints, on the basis of the service contract that you have entered into with a subsidiary of Bureau Veritas.

Your personal data are intended for the Certification service line or the Quality, Health & Safety and Environment department of the Bureau Veritas Group, depending on the nature of your request, and for their service providers, providing consulting and technical services as well as for the Bureau Veritas IT department. They will be retained for a period of one year for media requests and ten years for customer complaints from your request.

Your personal data can be transferred outside the European Union, in countries where Bureau Veritas subsidiaries operate, on the basis of standard contractual clauses established by the European Commission, available on request, by writing to: https://personaldataprotection.bureauveritas.com.

Fields marked with an asterisk must be filled in. Otherwise, Bureau Veritas Services would not be able to answer your questions and/or complaints.

In accordance with the French Data Protection Act of 6 January 1978 as amended and the General Data Protection Regulation of 27 April 2016, you have the right to access, rectify and erase any personal data concerning you, as well as the right to limit the processing, the right to oppose to the processing or the right to portability of your personal data. You have the right to withdraw your consent at any time by connecting to the site https://personaldataprotection.bureauveritas.com and unchecking the box dedicated to the collection of your consent. You also have the right to set out general and specific guidelines that define how you intend these rights to be exercised after your death. You can exercise your rights online to lodge a complaint to the Commission Nationale Informatique et Libertés (CNIL) in France or the relevant authorities in your country.