GDPR Compliance
How RMM-Portal.it handles and protects your personal data in accordance with the General Data Protection Regulation (GDPR)
Our Commitment to Data Protection
At RMM-Portal.it, we are committed to protecting your privacy and ensuring the security of your personal data. This page outlines our GDPR compliance practices and your rights regarding your personal information.
Last updated: May 21, 2025
Data Collection Practices
We collect and process personal data for specific, explicit, and legitimate purposes. We are transparent about what data we collect and how we use it.
Types of Personal Data We Collect
- Contact Information: Name, email address, phone number, and business address
- Account Information: Username, password, and account preferences
- Business Information: Company name, industry, size, and role
- Technical Information: IP address, browser type, device information, and cookies
- Usage Information: How you interact with our website, services, and communications
How We Collect Your Data
- Direct Interactions: When you fill out forms, create an account, subscribe to our newsletter, or contact us
- Automated Technologies: Through cookies, server logs, and similar technologies when you browse our website
- Third Parties: We may receive information about you from third-party service providers, such as analytics providers and advertising networks
Purposes of Data Collection
- Providing Services: To deliver the RMM solutions and services you request
- Customer Support: To respond to your inquiries and provide technical assistance
- Improving Our Services: To analyze usage patterns and enhance our website and offerings
- Marketing: To send relevant information about our products and services (with your consent)
- Legal Compliance: To fulfill our legal obligations and protect our rights
Legal Basis for Processing
Under GDPR, we process your personal data based on one or more of the following legal grounds:
Consent
We process certain data based on your explicit consent, which you can withdraw at any time. This includes marketing communications and non-essential cookies.
Contractual Necessity
Processing necessary for the performance of our contract with you, such as providing our RMM services and customer support.
Legal Obligation
Processing required to comply with our legal obligations, such as maintaining business records for tax purposes or responding to legal requests.
Legitimate Interests
Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring network security.
Balancing Test
When we rely on legitimate interests, we conduct a balancing test to ensure our interests don't override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests.
Your Data Rights
Under the GDPR, you have several rights regarding your personal data. We are committed to respecting these rights and have implemented processes to help you exercise them.
Right to Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
Also known as the 'right to be forgotten,' you have the right to request the deletion of your personal data in certain circumstances.
Right to Restriction
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
How to Exercise Your Rights
To exercise any of these rights, please contact our Data Protection Officer using the contact information provided at the bottom of this page. We will respond to your request within one month.
Response Timeframe
We will respond to your request within 30 days. In complex cases, we may extend this period by up to two additional months, but we will inform you of any such extension within the first month.
Data Protection Measures
We implement appropriate technical and organizational measures to ensure the security of your personal data and protect it against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Technical Safeguards
- Data encryption in transit and at rest
- Secure network architecture with firewalls
- Multi-factor authentication
- Regular security testing and vulnerability scanning
- Intrusion detection and prevention systems
Organizational Measures
- Regular staff training on data protection
- Access controls based on need-to-know principle
- Data protection impact assessments
- Documented data protection policies and procedures
- Vendor assessment and management program
Data Breach Procedures
In the unlikely event of a data breach that may affect your personal data, we have procedures in place to:
- Identify and contain the breach as quickly as possible
- Assess the risk to individuals' rights and freedoms
- Notify the relevant supervisory authority within 72 hours, where feasible
- Notify affected individuals without undue delay when there is a high risk to their rights and freedoms
- Document the breach and our response for regulatory compliance
Contact Our Data Protection Officer
If you have any questions about how we process your personal data or would like to exercise your data protection rights, please contact our Data Protection Officer.
Contact Information
-
Data Protection Officer
Michael Anderson
-
Email Address
-
Phone Number
+44 7305 000879 (ext. 2)
-
Postal Address
Data Protection Officer
RMM-Portal.it
296-310 High St
West Bromwich B70 8EN
United Kingdom
Send a Data Request
Response Timeframe
We aim to respond to all data protection requests within 30 days. For complex requests or if we receive a large volume of requests, we may need up to an additional 60 days to respond. If this is the case, we will notify you within the first 30 days and explain why the extension is necessary.
If we decide not to take action on your request, we will inform you of the reasons and your right to lodge a complaint with a supervisory authority.