{"id":30385,"date":"2022-10-14T09:41:33","date_gmt":"2022-10-14T13:41:33","guid":{"rendered":"https:\/\/blueridgeglobal.com\/legal\/ccpa-annex-2\/"},"modified":"2025-06-17T05:12:41","modified_gmt":"2025-06-17T09:12:41","slug":"gdpr-annex","status":"publish","type":"page","link":"https:\/\/blueridgeglobal.com\/legal\/gdpr-annex\/","title":{"rendered":"GDPR Annex"},"content":{"rendered":"[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text]G<\/strong>eneral\u00a0D<\/strong>ata\u00a0P<\/strong>rotection\u00a0R<\/strong>egulation (GDPR<\/strong>) is a data privacy regulation that went into enforcement on\u00a0May 25, 2018<\/strong>. GDPR is the updated version of Directive\u00a095\/46\/EC, which was enacted in 1995, and will more effectively address the protection of sensitive information in the current technical landscape.\u00a0 GDPR covers the protection of Personal Identifiable Information (PII) of EU citizens that is processed, stored, and managed by organizations.<\/p>\n

All of our Blue Ridge products are classified as \u201cProcessors\u201d under the GDPR guidelines. Since we do not determine the purpose and means of the data that is inputted and processed by our products, we cannot be considered a \u201cController.\u201d If you have any questions or require evidence of our compliance, please reach out to us. We will provide you with the information necessary to demonstrate our full compliance with GDPR across all of our lines of products.<\/p>\n

Blue Ridge Certifications<\/strong><\/h3>\n

SOC II Type I<\/strong>\u00a0for all of our products. This is an internationally recognized standard that covers the protection and management of sensitive information and all the various components.<\/p>\n

Topic:<\/strong>\u00a0Request from individual to remove their data from Blue Ridge products
\nBlue Ridge’s Response:<\/strong>\u00a0Please reach out to our information security team using the contact information provided on this page. Describe your request (for example, you want PII data removed from an application) and provide your contact information so we can confirm receiving request within 48 hours. Depending on the scope of the request, we may need to contact other resources to complete the process. Once completed, you will be notified that your request is resolved.<\/p>\n

Topic:<\/strong>\u00a0Consent Management: GDPR has requirements for explicit consent to be given for controllers.
\nBlue Ridge’s Response:<\/strong>\u00a0The PII required by Blue Ridge products must be entered by the Administrator before processing can begin. It is not possible for the product to track when consent was obtained. This information can be managed as a date field in the product but the product cannot be set up as a requestor of consent.<\/p>\n

Topic:<\/strong>\u00a0Right of Erasure \/ Right to be Forgotten: GDPR has extended rights to have PII removed from online storage, with exceptions noted in Article 17.<\/p>\n

Blue Ridge’s Response:<\/strong>\u00a0Blue Ridge has systems in place for Controllers to request PII to be removed. Due to the exceptions in GDPR for the deletion of such data, Blue Ridge is handling any removal request and responding without undue delay. For any removal request, part of our process is to confirm with the Controller that there are no exceptions for the request, including medical data or other legal requirements for data retention.<\/p>\n

Topic:<\/strong>\u00a0Right of Rectification: GDPR has extended rights to have PII be corrected by the person.
\nBlue Ridge’s Response:<\/strong>\u00a0PII can be updated in all Blue Ridge products.<\/p>\n

Topic:<\/strong>\u00a0Data Portability \/ Right to access data.<\/p>\n

Blue Ridge’s Response:<\/strong>\u00a0Blue Ridge can provide the data upon Controller request.<\/p>\n

Topic:<\/strong>\u00a0Breach Notification<\/p>\n

Blue Ridge’s Response:<\/strong>\u00a0Blue Ridge follows breach guidelines outlined in GDPR<\/p>\n

Topic:<\/strong>\u00a0Security
\nBlue Ridge’s Response:<\/strong>\u00a0Access control is available from the assignment of roles for the customer interface. For the Blue Ridge side, we have policies in place for control<\/p>\n

Updates\u00a0<\/strong><\/h3>\n

Please let us know if you have any questions by emailing our team at\u00a0privacy@blueridgeglobal.com<\/a>.<\/p>\n

Frequently Asked Questions<\/strong><\/h3>\n

Q: What is a DPO?<\/strong><\/p>\n

A: DPO stands for Data Protection Officer and is a requirement for some organizations.<\/p>\n

Q: How do I contact Blue Ridge\u2019s DPO?<\/strong><\/p>\n

A: Blue Ridge does not meet the requirements for a DPO. All related responsibilities are being carried out by Blue Ridge\u2019s information security team.<\/p>\n

You can contact our information security team at:<\/p>\n

Blue Ridge Solutions, Inc.\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 or\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 privacy@blueridgeglobal.com<\/p>\n

Attn: Marketing<\/p>\n

11585 Jones Bridge Rd
\nSte #420 Unit #231
\nJohns Creek, GA 30022<\/p>\n

Q: Where is Personally Identifiable Information (PII) currently stored?<\/strong><\/p>\n

A: To the extent that our customers input PII into the products, such data is stored within the applications, which are housed within Amazon Web Services (AWS) (Frankfurt, Germany; N. Virginia, USA).<\/p>\n

Q: What about deleting a person\u2019s PII in your applications?<\/strong><\/p>\n

A: We have privacy processes in place as part of our privacy policy, so we have the framework already in place to allow someone to opt out.<\/p>\n

Q: Can I remove my PII from your products?<\/strong><\/p>\n

A: Yes, unless there is an overriding exception as outlined in the GDPR, such as medical record requirements and other legal data record requirements. We have policies in place to verify the storage requirements with the Controller of the data and will work with them to anonymize or delete the data without undue delay.<\/p>\n

Q: Are Blue Ridge vendors and sub vendors required to be compliant?\u00a0<\/strong><\/p>\n

A: Yes.\u00a0 We work with our vendors to add addendums to our contracts that requires them to be GDPR complaint in addition to the confidentially agreements that are already in place.<\/p>\n

Q: We as a company store PII in one or more of your products, how can we comply?<\/strong><\/p>\n

A: If you have data that qualifies as being regulated by GDPR (for example, you uploaded a document with PII for a GDPR-covered person or persons) it is up to the customer to remove that data.\u00a0 Since we do not actively access customer data, we do not inherently know if your data is GDPR regulated.\u00a0 Our most significant undertaking to be GDPR compliant concerns data that is uploaded or input by customers. We are working on solutions that will allow customers to anonymize or remove GDPR regulated data using automated solutions but as of today the process would be manual.<\/p>\n[\/vc_column_text][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/4″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/4″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][image_with_animation image_url=”42618″ image_size=”portfolio-thumb_large” animation_type=”entrance” animation=”None” animation_movement_type=”transform_y” hover_animation=”none” alignment=”” border_radius=”none” box_shadow=”none” image_loading=”default” max_width=”100%” max_width_mobile=”default” img_link=”https:\/\/verasafe.com\/representative-services\/uk-data-protection-representative-program\/”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/4″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][image_with_animation image_url=”42617″ image_size=”portfolio-thumb_large” animation_type=”entrance” animation=”None” animation_movement_type=”transform_y” hover_animation=”none” alignment=”” border_radius=”none” box_shadow=”none” image_loading=”default” max_width=”100%” max_width_mobile=”default” img_link=”https:\/\/verasafe.com\/representative-services\/gdpr-article-27-representative-program\/”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/4″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"

[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none”…<\/p>\n","protected":false},"author":36,"featured_media":0,"parent":1555,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-30385","page","type-page","status-publish"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/pages\/30385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/users\/36"}],"replies":[{"embeddable":true,"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/comments?post=30385"}],"version-history":[{"count":11,"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/pages\/30385\/revisions"}],"predecessor-version":[{"id":42621,"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/pages\/30385\/revisions\/42621"}],"up":[{"embeddable":true,"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/pages\/1555"}],"wp:attachment":[{"href":"https:\/\/blueridgeglobal.com\/wp-json\/wp\/v2\/media?parent=30385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}