Record of data processing activities

Which register stores what type of data, what is the legal basis and purpose, what are the risks. GDPR article No.6.,15.,30.,32.

Incident management

Incident management provided in GDPR. This can be filled in manually or automatically. GDPR article No.33.,34.

Supporting preliminary impact assessment on data protection

The preliminary impact assessment on data protection can be documented based on the French CNIL methodology. GDPR article No.35.

Registering the right requests of the data subjects

The software stores all the requests related to excercising rights of the data subject as provided in the GDPR. e.g. right to erasure, right to resctriction of processing, right to rectification, right to object. GDPR article No.12.

Registering data transfers

Data transfers to data processors can be recorded. The transferred data types can be recorded for every data subject. GDPR, article No.24., 28.


Extra functionality, anonymization of data related to identified or identifiable natural persons. GDPR Preamble (26)

Personal data belonging to data subjects are not stored.

In order to avoid a new security risk, personal data are not stored, only an external identifier.


By implemented and customizable reports business decisions are supported in a more efficient way.

Data Recovery

By mapping the data with personal character in the databases this function can save a lot of time. Types of data with personal character: Last Name, Birth Name, Company Name, First Name, Address, Country of Birth, Phone Number, Social security number, Personal Number, Tax Number, Bank Account Number, Phone Number, Email address, Website, Identity Card, Driver’s Lience, Passport, Residence certificate, Sole trader’s licence

Customer portal CRM module for data export

Costumer portal CRM module is provided to help the users in exporting their data. Integration is needed with the already existent systems. GDPR article 12.

AD integration

Users’ management can be easily integrated with the already existing LDAP/Active Directory solution

Collecting personal data from source systems

In the systems that contain personal data customers can be identified based on natural ID’s. This is followed by collecting data from all the connected systems.