General Data Protection Regulation (EU) 2016/679


GDPR (General Data Protection Regulation) is the new EU regulation for protection of personal data and the greatest change in data protection regulation over the past 20 years. It will replace the 95/46/EC Directive for protection of personal data and will strengthen the rights that EU citizens have over their personal data.

The General Data Protection Regulation (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union. It addresses the export of personal data outside the EU. The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. When the GDPR takes effect, it will replace the 1995 Data Protection Directive (Directive 95/46/EC).

Heating Care Scotland Limited values privacy, for both our customers and our employees. We are committed to GDPR compliance and will be ready when the new data protection regulation takes effect in 25th May 2018.

To achieve this, Heating Care Scotland Limited has initiated a common GDPR program to strengthen and improve data protection across the entire Heating Care Scotland Limited Group.

The Heating Care Scotland Limited GDPR Program addresses all services and underlying processes to be compliant with the requirements of GDPR. This includes all customer contracts where Heating Care Scotland Limited is processing personal data on behalf of customers. All Heating Care Scotland Limited UK subsidiaries will implement the same new controls and processes. This is to ensure a sufficient level of data protection regardless of which Heating Care Scotland Limited UK subsidiary is processing personal data.


To ensure continuous data protection and fulfilment of GDPR requirements, Heating Care Scotland Limited will monitor its compliance through both internal and external audits.

Heating Care Scotland Limited’s team has the knowledge and competence on GDPR to prepare our own business for the new regulation.