GDPR
A Stringent Commitment to Comprehensive Data Protection
The UPON Pledge: Integrity and Privacy
At UPON Group, we hold in the highest regard the privacy and trust that our customers, employees, and partners place in us. Consequently, we’ve taken robust steps to ensure the integrity and security of your personal data, aligning all our actions and protocols with the European Union’s General Data Protection Regulation (GDPR). This commitment not only underscores our adherence to current regulations but also highlights our belief that safeguarding identity and privacy is paramount in the digital age we inhabit.
Adhering to GDPR for Responsible Privacy.
UPON's Priority:
Protecting your customers' identity.
GDPR Compliance Statement
The companies comprising the UPON Group are deeply dedicated to respecting and protecting the personal data of our customers, employees, and partners. In this light, we are pleased to affirm our complete compliance with and adherence to the European Union’s General Data Protection Regulation (GDPR).

To ensure appropriate and secure data handling, the UPON Group strictly adheres to the following principles:

Ongoing Assessment
We regularly conduct Data Protection Impact Assessments (DPIA) to identify and mitigate any data protection-related risks.
Detailed Recording
We maintain a meticulous record of all our data processing activities, ensuring total transparency in our operations.


Dedicated Specialists
We have appointed Data Protection Officers (DPOs) within our organisations, who oversee and ensure the proper implementation of GDPR guidelines.
Security Measures Implementation
We adopt advanced technical and organisational measures to safeguard personal data against loss, alteration, unauthorised access, or any form of unlawful processing.


Informed Consent
We ensure that any data we process has the explicit, informed, and unambiguous consent of the individuals concerned.
Respect for Individual Rights
We acknowledge and facilitate the exercise of rights to access, rectification, erasure (“right to be forgotten”), and other rights set out in the GDPR.


Secure Data Transfers
For international data transfers, we guarantee they are conducted under the safest conditions and in compliance with GDPR regulations.
Preparation and Response
We are equipped to detect, report, and address any data breaches swiftly and effectively, minimising any potential impact.


Ongoing Assessment
We regularly conduct Data Protection Impact Assessments (DPIA) to identify and mitigate any data protection-related risks.

Detailed Recording
We maintain a meticulous record of all our data processing activities, ensuring total transparency in our operations.

Security Measures Implementation
We adopt advanced technical and organisational measures to safeguard personal data against loss, alteration, unauthorised access, or any form of unlawful processing.

Respect for Individual Rights
We acknowledge and facilitate the exercise of rights to access, rectification, erasure (“right to be forgotten”), and other rights set out in the GDPR.

Preparation and Response
We are equipped to detect, report, and address any data breaches swiftly and effectively, minimising any potential impact.

Informed Consent
We ensure that any data we process has the explicit, informed, and unambiguous consent of the individuals concerned.

Secure Data Transfers
For international data transfers, we guarantee they are conducted under the safest conditions and in compliance with GDPR regulations.

Dedicated Specialists
We have appointed Data Protection Officers (DPOs) within our organisations, who oversee and ensure the proper implementation of GDPR guidelines.
Ongoing Assessment
We regularly conduct Data Protection Impact Assessments (DPIA) to identify and mitigate any data protection-related risks.

Detailed Recording
We maintain a meticulous record of all our data processing activities, ensuring total transparency in our operations.

Dedicated Specialists
We have appointed Data Protection Officers (DPOs) within our organisations, who oversee and ensure the proper implementation of GDPR guidelines.

Security Measures Implementation
We adopt advanced technical and organisational measures to safeguard personal data against loss, alteration, unauthorised access, or any form of unlawful processing.

Informed Consent
We ensure that any data we process has the explicit, informed, and unambiguous consent of the individuals concerned.

Respect for Individual Rights
We acknowledge and facilitate the exercise of rights to access, rectification, erasure (“right to be forgotten”), and other rights set out in the GDPR.

Secure Data Transfers
For international data transfers, we guarantee they are conducted under the safest conditions and in compliance with GDPR regulations.

Preparation and Response
We are equipped to detect, report, and address any data breaches swiftly and effectively, minimising any potential impact.

Artificial Intelligence Technologies and Privacy
Further to this, the UPON Group wishes to emphasise its specific commitment concerning our Artificial Intelligence (AI) technologies. We recognise that AI is a potent tool which, if not used ethically and responsibly, might impinge upon individuals’ privacy and rights.
For this reason, all our solutions and applications deploying artificial intelligence have been designed and implemented with a primary focus on respecting individual privacy. We put into place stringent practices to ensure:

AI with Integrity: UPON Group’s Commitment to Responsible Innovation
At UPON Group, we believe that Artificial Intelligence, when employed responsibly and ethically, can be an invaluable asset to both society and business. We are dedicated to leading by example, demonstrating that it’s feasible to progress in technological innovation while simultaneously upholding a high standard of privacy and respect for individual rights.
