In this article, we discuss our tools for managing stored data according to the General Data Protection Regulation (GDPR) laws.
💡 Want to learn more about GDPR laws and how they relate to Foleon? Check out our article All about Foleon and GDPR.
The basics of the GDPR
Let’s first touch on the basics of the GDPR. There are a number of important terms related to the GDPR: the controller, the processor, the data subject, and personal data.
👇 Let's explain these terms with a practical example.
Meet Annabel, an EU citizen. Let’s say Annabel’s data has been recorded in your CRM. In this case, Annabel is a “data subject” and your company is the “controller” of her “personal data” (any information that could be used to identify Annabel). If you acquired Annabel’s contact information via Foleon (e.g., through a form), then Foleon acts as the “processor” of Annabel’s data on behalf of your company.
With the introduction of the GDPR, data subjects like Annabel are given an expanded set of rights, and controllers and processors are required to adhere to an expanded set of regulations. If you’d like to know more about the new rights and regulations, you can read the GDPR in full here: https://gdpr-info.eu/.
Managing stored data
As per the GDPR, your audience has the right of access and the right to be forgotten, meaning that you need to be able to export or delete their data if they ask you to do so. If you've acquired their data via a Foleon form, you can enter their email address below to export or delete all related data from our servers.
You can access Stored data from the dashboard. Click Admin Console > Stored data.
Export data (right of access)
One of the rights introduced by the GDPR is the right of access. The GDPR empowers individuals to exercise this right, meaning that you’ll need to be able to show what data you have on them without undue delay if they ask you to do so.
From the Stored data page, you can export all information related to an email address.
To export a user's data:
- Fill in the email address
- Select Export Data
- Click Submit
You’ll receive an email containing a data export.
Delete data (right of erasure)
Another one of the rights introduced by the GDPR is the right of erasure (also known as the "right to be forgotten"). The GDPR empowers individuals to exercise this right, meaning that you’ll need to delete their data without undue delay if they ask you to do so.
From the Stored data page, you can delete all information related to an email address from your account (and our servers).
To delete a user's data:
- Fill in the email address
- Select Delete Data
- Click Submit
You’ll receive a confirmation email after the data has been deleted.