The platform supports processes related to GDPR thanks to the wide reflection of business processes related to data processing and management as well as data itself, incident management or risk analysis, as well as the implemented process of continuous monitoring and reflection on the change platform resulting from the update of the GDPR regulations. The client/company during the trial period as a data controller should define business processes in its organization, verify compliance with its standards, policies, and procedures in the area of ​​personal data protection, supported by risk analysis and assess the situation within your organization’s reports.

The Operator will make efforts to adopt the System to legal changes, however, due to the number and multidimensionality of issues, he can not guarantee it.

All data is currently stored on servers in the European Union / European Economic Area, with maintaining adequate security standards.

For a contextual perspective and compliance perspective, these are basic identification data of employees who fill roles in the “Management, Organizational and Procedural Context”. For mature process organizations, it is possible to not assign employees and rely only on contact details of roles. For the operational perspective, these are the data and contact details of Data Actors/Subjects necessary for unambiguous identification, confirmation of identity in the case of interaction with the Data Entity and effective communication. At present, no documents with personal data are processed in the system.

All kinds of personal data are entered/processed by the Client / Company user, who remains the administrator of all personal data processed in the System Instance. The Client / Company during the trial period should verify that the scope and categories of personal data processed in the System Instance and the security are in accordance with its standards and policies. The purchase of a subscription confirms positive verification.

The actual basic identification and contact details of Data Actors/Subjects are processed from an operational perspective. The Client / Company as their administrator should reflect this in contracts with Data Entities and/or information obligations.

The eGDPRBay system has been designed for every size of the company.

The scope of data entered in the context perspective allows the automatic generation of such registers. The user selects which activities should be included in these registers.

Yes. The Risk Management area located in the Compliance Management perspective enables the recording and management of identified risks – starting from identification (considering the context), through estimation (identification, analysis, evaluation), then treatment and remedies up to monitoring. An important element supporting risk management are reports from the Report Management Area generated based on data and relations from CONTEXT PERSPECTIVES.

In many industries, the management or support processes have similar scope and purposes of the processing, therefore the Operator strives to make the client modify the scope of predefined data prepared by the Operator as part of the system implementation, and not have to enter data for such purposes/processes from scratch. The goal is to optimize the client’s effort/costs in implementing the system. An example can be the HR processes.

In order to ensure the adequacy of the scope of input data to customer needs and costs, most fields are optional. It is the client who decides what data he wants or can enter into the system. In conjunction with a flexible data model, this allows the system to be adapted to almost any size of the company. The scope of the data introduced determines the possibility of a subsequent multidimensional analysis of the processing of personal data and related risks. The initial, minimum scope should enable reliable risk analysis and the generation/preparation of obligatory registers.

The Company’s involvement is derived from the amount of data that should be entered into the system. The operator strives to ensure that the client as part of the implementation of the system will modify the scope of the predefined data prepared by the Operator, and not have to enter data for such purposes/processes from scratch. The goal is to optimize the client’s effort/costs in implementing the system. An example can be the HR processes. The involvement will be greater when entering data.

The multiplicity and complexity of processes usually translate into more processing goals, legal grounds, and other issues/data that the organization should manage. The degree of complexity is a particularly important issue for situations in which the administrator has imposed a time frame for the preparation of responses (e.g. handling of data subjects’ reports) or analysis and, possibly, reporting of infringements. For large organizations, it is advisable to implement the eGDPRBay class system. The eGDPRBay system is a relational system, so in most cases after entering the data, the user will refer to the previously entered data if necessary and do not enter it repeatedly.

The eGDPRBay system may support the achievement or confirmation of compliance with the Regulation and/or other legal acts based on which personal data are processed in many dimensions, e.g.: – in risk management (see Risk Registry and Report Area that may support identification and analysis risk), – preparation and management of activity registers or categories of processing activities (after entering the data necessary to prepare such a register, the system can generate such a register in a dynamic way). – verification of the adequacy of measures / technical and organizational measures in relation to types/categories of data processed, IT systems, processing area or risks. – verification of accountability and supervision for compliance with the Regulation (see management, organizational and procedural context). – keeping a register of authorizations to process personal data and templates of such authorizations – keeping a training register. The system’s possibilities are much greater. The description of the system concept should help in understanding how or whether the eGDPRBay system can support the organization in the area of ​​personal data management. We believe that the functionalities implemented or planned to be implemented together with a flexible data model and predefined content will significantly contribute to the achievement and subsequent management of compliance with the Regulation and/or other legal acts based on which personal data are processed. Due to the multidimensionality and complexity of the issue of managing the processing of personal data, we cannot guarantee that the eGDPRBay system ensures compliance with the Regulation or other legal acts.

The organization can define any processing goals and the flexible data model of the eGDPRBay system should enable their introduction into the system. In case of doubt, please contact us.

Yes. Before you buy a subscription, after registering, you can test the system free of charge for 30 days.

The system provides the functionality of managing retention times. The configuration of this functionality belongs to the user.

The eGDPRBay portal is the result of the GDPR analysis in many areas, however, it does not guarantee compliance with GDPR or protection against possible penalties. In case of any doubts, consultations regarding the system or legal functioning are recommended.

Yes, but it can be a paid service. After reporting the demand by the customer, the Operator will prepare a quote and information on possible dates of consultations.