GDPR

Does anyone else have a pigeon hole system for people to collect post and rotas? How are you dealing with GDPR? Is it ok to address things with Christian name and Surname or should we stick to first names only? These pigeon holes are in a public space which is accessed in daylight hours. Any comments would be greatly appreciated. Thanks Nikki Jackson