The General Data Protection Regulation (GDPR) standardizes data protection law across all 28 EU countries and imposes strict new rules on controlling and processing personally identifiable information. It also extends the protection of personal data and data protection rights.
The following are particularly noteworthy among the novelties introduced: data handling must be unambiguous. GDPR says “Silence, pre-ticked boxes or inactivity should not constitute consent”.
In addition, the nature of the consent required to satisfy the condition for processing sensitive personal data must be “explicit”. Explicit consent can be thought of in much the same way as the GDPR’s standard requirements for obtaining consent. The difference is that it must be obtained in a way that leaves no room for misinterpretation.
Consent must also be verifiable ,in other words, the business must be able to prove that it obtained the individual’s consent.
Complying with the new regulation, we have developed a platform so that you can obtain the explicit consent of the users easily and quickly.
We will enable an SFTP account to load your database in CSV format, with the email or mobile phone of your users. We send a Registered email or a Registered SMS with a link to a web page to your users depending on the information we have.
On the website, your users can read your privacy conditions and select those clauses they want to accept.
Finally, we issue a digitally signed documentary evidence with the accepted clauses, and store it in the SFTP account.
The documentary evidence refers to all the actions performed by the user to freely, specifically, and unambiguously state their consent for the processing of their personal data throughout the entire process.
Display the documentary evidenceIt is a file that contains the values in a table of text lines organized so that each column value is separated by a comma from the next column's value and each row starts a new line.
The file must contain the unique identifiers of your clients, their email and their mobile phone. If you do not have that information just leave a blank space. For example:
1234,[email protected],+34666555444, 12346,[email protected],+34666555333, 12347,,+34666555222, 12348,[email protected]
You are the only one who gets to decide whether to use SMS or email.
Yes, content is fully customizable. Email also allows you to add your own logo.
Every 24 hours, we will generate a CSV file, with those users that have accepted or rejected the clauses. You can find the file in your SFTP account. This file has the information of the users of your CSV file, a column with the status of each clause, and, finally, the name of the certificate for that user. As per the above example, for the acceptance of 3 new clauses:
1234,[email protected],+34666555444, 12346,[email protected],+34666555333, 12347,,+34666555333, 12348,[email protected]
The sending of the initial communication activates an expiration counter. This counter is fully customized to meet your needs. When it expires, the certificate will be automatically generated and that user will be part of the CSV file of that particular day, with the expired value.
12345,[email protected],+34666555444,expirada,expirada,expirada,certificado12345.pdf
Definitely yes. We configure an SFTP account for each language, and you will have to segment your users by language and create a CSV for each of them.
No problem. We will configure an SFTP account for each type of user, and you will have to segment your users and create a CSV for each of them.
