Travel Tech Blog

What you absolutely must know about data protection!

In the following interview we learn what every company and every manager must know about the new European Data Protection Regulation:

For more than two decades, numerous prestigious clients such as Accenture and BMW Group Austria have relied on Thiemo Sammern’s expertise in relation to data protection and data management. For more than 20 years his company, METHIS, has used sophisticated and exceptionally intelligent tools to process personal information, both legally and with factual accuracy.

Thiemo, we are very excited to interview a proven expert in customer data. When does the new European Data Protection Regulation come into force?
The regulation actually came into force in all Member States in May 2016! Currently a transitional period of two years applies in which all parties must adjust to the new rules. The rights, obligations and penalties will then be executed from 25 May 2018.


What is actually meant by the term “regulation”?
A regulation automatically applies to all EU Member States. It does not have to first be adopted separately in each individual Member State. This allows for a fast, complete standardisation of rights and obligations in all EU countries. This regulation is based on the existing German data protection law but also includes extensive enhancements. It regulates the rights of consumers, the obligations of companies and the penalties for violations.

What are the possible fines for violations of the Data Protection Regulation?
Here’s where you can see how serious the regulation is! The penalties are up to four per cent of a company’s global annual turnover!

To whom does this regulation apply?
It must be observed by all companies that store and process the data of EU citizens. The location of the registered office is irrelevant.

In your opinion, what benefits does this regulation provide?
For companies, it primarily brings legal certainty to all EU Member States. Previously, we had to deal with country-specific rules and interpretations, which was sometimes incredibly complicated. With the new regulation, complaints or claims can be filed at any data protection authority within the EU. A German customer can therefore complain to a German authority about privacy violations by a Lithuanian company, for instance. This naturally simplifies the enforcement of consumer rights.

Theory is one thing; practice is another. I am sure that there are some readers who have questions about the Data Protection Regulation. Where can they get more information and receive practical help?
Please feel free to contact me with questions about data protection. We also offer free webinars on this topic. You can call or write to me on:

t.sammern@methis.at
Phone +43 662 2202 4413
Mobile +43 664 3405 097

Thank you very much for the interview!