Request

From: Sinan Elver [mailto:[email protected]] Sent: Monday, May 21, 2018 12:10 PM To: AKI info <[email protected]> Subject: [VÄLJAST] GDPR Questions Dear AKI, My name is Sinan. I'm founder of Reachpeople OÜ. I would like to ask you a question... 1. Us, as Estonia-based Reachpeople OÜ, offer marketing automation solutions and process data on behalf of our customers. As a company we have developed our infrastructure in line with GDPR. But is there an institution that can approve or certify it? 2. Our company is located in Estonia and we have customers all over the world. Processed data is placed in data centers within the EU. Do we need to get approval for transfers of data for people outside of the EU territory to be processed at a data center outside the EU? For example; The e-commerce company in Japan uses Reachpeople. Can we keep the data of Japanese company's customers in the data center in Japan? Do you also need to get approval for this? 3. We want to obtain ISO 27001 certification, is there a link between this certificate and GDPR? Is there anything we need to pay attention to? Thanks in advance. Sinan Elver CEO p: +3726170363 a: Sepapaja 6, Tallinn, Estonia, 15551 w: reachpeople.co e: [email protected]