Warr's Harley-Davidson online store (store.warrs.com) is fully compliant with the EU Compliance - General Data Protection Regulation (GDPR)

What is the GDPR?
The General Data Protection Regulation (GDPR) has been put together to protect the privacy and data of EU citizens. It replaces the Data Protection Directive 95/46/EC, and aims to harmonise and broaden the reach of EU data protection law across Europe. In May 2018, the GDPR will signify change for a lot of marketers, specifically they will afect the way data is collected, processed and used.

What has changed?
The current Data Protection Directive (ofcially Directive 95/46/EC) defines an individual’s consent as “any freely given specific and informed indication of his wishes by which the data subject signifies his agreement to personal data relating to him being processed.”

The standards for lawful consent have now been raised under the GDPR. On 25th May 2018, the new EU regulation (GDPR), aims to give citizens control of their personal data and to simplify the regulatory environment for internal businesses by unifying the regulation within the EU. Personal data must be collected for specified, explicit and legitimate purposes relative to the purposes for which they are processed.

With regards to ‘sign-up’, a few things have changed:
1. Indication of consent must be unambiguous and involve a clear afrmative action.
2. Consent should be separate from other terms and conditions. It should not be a precondition of signing up to a service.
3. The GDPR specifically bans pre-ticked opt-in boxes.
4. It requires granular consent for distinct processing operations.
5. The GDPR gives a specific right to withdraw consent. You need to tell people about their right to withdraw, and ofer them easy ways to withdraw consent at any time.

Consent under the GDPR must be “freely given, specific, informed and unambiguous consent; which informs subscribers about the brand that’s collecting the consent and provide information about the purposes of collecting personal data,” according to the Information Commissioner’s Ofce (ICO) circa May 2017.

Visit our Privacy Policy to have more details on our actions to protect, storage and use your private data.