Articles in this section

Booking Manager and GDPR Compliance

Avatar
Nadia D'Addezio
  • Updated
Follow

What is the GDPR?

GDPR is short for the General Data Protection Regulation that will take effect from May 25, 2018. It was passed by the European Parliament to harmonize data privacy laws across member states of the European Union. Its purpose is to support privacy and give EU residents rights over how their personal data is processed or otherwise used.

The GDPR applies not only to EU-based businesses, but also to any business that controls or processes data of EU citizens.

 

What is MMK doing to comply with GDPR regulation?

At MMK Systems we are fully involved in helping you, our partners and customers, understand what the GDPR means for your businesses and build compliant processes of your own.

Between now and May 25th 2018 (and beyond), we are committed to improve Booking Manager and help you comply with the GDPR.

We’ve created this page to help you better understand GDPR and update you between now and May 25th.

 

Product roadmap

What we're building and when

First let us introduce you to Jens, he is a contact of yours and an EU citizen. He's called the "data subject," and your company is called the "controller" of that data. If you're a Booking Manager customer, then MMK Systems acts as the "processor" of Jens's data in your behalf. With the introduction of the GDPR, data subjects like Jens are given an enhanced set of rights, and controllers and processors like you and us, respectively, an enhanced set of regulations.

Here you find a detailed list of the features we’re building to help you be compliant. We’ve already started to build many of these new features, and we’ll continue to do so. Our plan is to provide all the mandatory features by May 25th 2018 and even more.

  WHAT IT MEANS WHAT ARE WE DOING
Legal interest

You need to have a legal reason to use Jens data.

You have several legal reason to keep the data:

  • consent (he opted in in full knowledge of fact),
  • performance of a contract (he’s your customer),
  • legal interest ( legal obligation to keep the data),
  • "legitimate interest" (e.g. he’s a customer, and you want to send him offers that might be of interest).
  • Automatically track clients/prospects basis for processing the private data;

Available soon

  • Set data expiration dates according to status.

Currently Available 

See how it works
Consent

In order for Jens to grant consent under the GDPR, a few things need to happen:

  • He needs to be told what he’s opting into. That's called "notice".
  • He needs to affirmatively opt-in (pre-checked checkboxes aren't valid)
  • The consent must be explicit for each purpose
  • Mailchimp (automatically track the consent on MailChimp forms).

Currently Available

See how it works

  • Terms & Conditions consent in Booking Manager Portal

 Currently Available

See how it works

  • Crew list ( Terms & Conditions consent in the form);

 Currently Available

See how it works

  • Online Booking (Search Engine Widget) (Terms & Conditions and Marketing consent in the form).

 Currently Available

 See how it works (Terms&Conditions)

 See how it works (Marketing Consent)
Withdrawal of consent
(or opt out)

Jens needs the ability (as data owner) to see what he signed up for, and withdraw his consent at any time.
Opt out must be easy.
  • Mailchimp automatic unsubscribe from the newsletter list.

Currently Available

  • Upon client request, change status in addressbook.

Currently Available

Access Modification Portability

Access and portability

Just as he can request that you delete his data, Jens can request access to the personal data you have about him.

If he requests access, you (as the controller) need to provide a copy of the data.

Modification

Just as he can request to delete or access his data, Jens can ask your company to modify his personal data if it’s inaccurate or incomplete. If and when he does, you need to be able to accommodate that modification request.
  • Booking Manager enables you to easily send a link to Jens to review or request the modification of his data. 

Currently Available

See how it works

  • Booking Manager enables you to grant any access/portability request by easily exporting Jens contact record.

Currently Available

See how it works
 Deletion

Jens has the right to request that you delete all the personal data you have about him. The GDPR requires the permanent removal of contact from your database, including email tracking history, call records, form submissions and more.

The right to deletion is not absolute, and can depend on the context of the request, so it doesn’t always apply.
  • Forget button ( to delete private data of the customer);

Available soon

  • Expiry date info according to legal requirement.

Currently Available

See how it works

 

 

 

DISCLAIMER:

This page is not an official guide to EU data privacy nor legal advice for your company to use in complying with EU data privacy laws like the GDPR. It is meant to help you better understand how Booking Manager will addressed some important legal points. In short, you may not rely on this paper as legal advice, nor as a recommendation of any particular legal understanding.

Related articles

Comments

0 comments

Please sign in to leave a comment.