WinLine SMART GDPR
EU General Data Protection Regulation
The EU General Data Protection Regulation (EU GDPR) uniformly regulates the processing of personal data in companies and public bodies. The regulation applies in all states of the European Union, replaces the national data protection rules and thus harmonizes data protection law across the EU.
In the course of the GDPR, natural persons receive numerous rights with regard to the use and protection of their data, e.g. B. the right to data deletion, disclosure, restriction and objection.
On the other hand, the GDPR brings a number of new obligations for companies that process personal data. Almost all companies are affected, because data from employees, customers, interested parties, suppliers or other business partners is generated almost everywhere. Failure to comply could result in severe penalties.
Users of the mesonic WinLine benefit from central documentation, automated processes and secure processes that are mapped within the WinLine DSGVO module. The module facilitates the legally compliant handling of personal data within the WinLine.
Content of the GDPR
Affected people
Companies are obliged to inform data subjects. This concerns i.a.
- the purpose and legal basis of data storage
- the type and content of the data collected
- the data source and the duration of the data storage
Affected persons have i.a. following rights:
- the right to data deletion ("right to be forgotten“)
- the right to restrict the processing of the data
- the right of access (information) to your stored data, correction of data and objection to data processing
Are you GDPR-ready?
Answer the following questions and determine how far the GDPR regulations have already been implemented in your company. Do you have:
- a processing directory created?
- technical and organizational measures taken?
- carried out a risk analysis of your processes?
- Data protection impact assessments defined?
- appointed a data protection officer?
- Have you checked your documents, terms and conditions and data protection declarations?
- Adjusted your website?
- Have your order processing contracts revised?
- Declarations of consent from your customers / prospects obtained and managed in an evaluable manner?
- Ways to anonymize personal data?
- Has your company agreement been adapted to the GDPR?
- Have your data security measures checked?
- Measures set in the event of a data breach?
- Have your employees trained and sensitized?
Central functions
The WinLine GDPR module supports you in implementing the legal requirements and is made up of four modules:
PDMS - Process & Document Management System
- Document technical and organizational measures (TOMs)
- Build, manage, revise processing directories
- Distribute employee instructions in an automated and traceable manner
- simple proof to the authorities
- Manage employee protection documentation
- Documentation for ISO certification
- Management of work instructions, manuals, messages, etc.
Consent Management
- Consent, change and revocation management (opt-in / opt-out)
- Administration and processing of personal data, especially for e-mail marketing
- Logging of the type of consent
- Consent history
Information tool
- automated summary of data information
- Output relevant information in PDF format at the push of a button
- Fulfill the obligation to provide information to those affected
Data anonymization
- Anonymization of personal data (restricted personal reference)
- Original data can no longer be reconstructed
- Movement data for statistical evaluations still available without personal reference
- Implementation of the right to data minimization / deletion
Examples from the WinLine GDPR module
