We mapped and created an analysis of the existing information system from the point of view of personal data protection. Subsequently, we helped implement technical and organizational measures, set up system processes and modified the system to comply with GDPR regulations.
GDPR is an abbreviation for the General Data Protection Regulation. It is a European legislative regulation that was adopted in 2016 and entered into force on 25 May 2018. Its aim is to strengthen the protection of personal data of citizens of the European Union and to ensure that personal data is processed transparently, fairly and for a purpose that is relevant to this processing determined. The GDPR also introduces new rights for citizens regarding their personal data, such as the right to access data or the right to erasure.
This regulation also significantly affected our long-standing customer, Fincentrum. For us, this meant modifying and expanding the Findata information system supplied by us to meet GDPR requirements. The system had to be modified so that the Fincentrum company ensured a high level of personal data protection and compliance with the principles of data processing set out in the GDPR.
In general, it can be said that it was mainly about:
Mapping the processing of personal data in the information system and determining whether it is necessary to obtain the consent of the person concerned for this processing or whether the processing of personal data can be carried out on the basis of another legal reason.
Implementation of technical and organizational measures to ensure the security of personal data and protection against unauthorized or illegal processing.
Setting up system processes that will perform certain activities automatically and transfer some to the relevant departments of the company in order to ensure the functioning of the company in accordance with the GDPR regulation.
Thanks to a great deal of effort, the GDPR control and compliance system was deployed quickly and precisely. Fincentrum was thus able to fulfill this regulation from the beginning of its validity and in the highest possible quality.
