Most companies have their own GDPR policies but they all have to be aligned with the 6 principles of this regulation including transparency, data minimization, and storage limitation.
New settings options are now available to help you with GDPR monitoring:
In Settings page we created a section dedicated to GDPR where admins can:
(Settings > GDPR and terms of use)
-
Activate the data retention period
-
Add a link to the company’s privacy policy
-
Add the DPO name and contact
-
Manage the request from users (for the deletion of their accounts)
1. Activate the data retention period
This setting allows the admins to set a period after which user information will automatically be deleted from the platform.
By activating this setting the default retention period will be 2 years. However, it is possible to choose another period:
- A month
- 1 year
- 2 years
- 5 years
- Custom (only in months or years)
⚠️ The data retention period is applicable after the user's last login on the platform.
⚠️ The data will be deleted. This action is therefore non-reversible.
2. Add a link to the company’s privacy policy
The admins can set a link to their company’s privacy policy page. The user will be able to see it on My account > Security > GDPR settings > Privacy Policy; or in the dropdown from their avatar.
3. Add the DPO name and contact
The admin can add information about their data protection officer (DPO) to make it easier for the users to know who is the person in charge.
This information will be displayed on My account > Security > GDPR settings > DPO Information.
4. Manage the request from users (for the deletion of their accounts)
If users ask directly for their information to be deleted from the platform the admin will receive an email with this information.
On the GDPR and terms of use page, the admin will find a section to manage these requests. The button manage will redirect to a page with a list of all of the users’ requests.
⚠️ The admin must validate the request for the process of deletion to be done.
How can users request the deletion of their data from the platform?
On My account > Security the users can find the GDPR Settings.
In there they have the option to control their personal data on the platform and request the deletion of their account.
To do that they must press the button request and then confirm their action on the pop-up.
⚠️ The user will have 5 seconds to cancel the request. After 5 seconds, the request is sent to the admins and the user will receive a confirmation email and be suspended from the platform.