GDPR Authorization

GDPR (General Data Protection Regulation) is an acquis that determines the regulations on data protection and privacy in the European Union and the European Economic Area. GDPR Authorization is an authorization to protect data. It primarily aims to give contacts control of their personal information and then to align companies with these regulations.



ROUTE: Dashboard > System > Security > Authority Groups


GDPR Authorizations are located on the Authority Groups page. Apart from the module authorizations of the authority groups registered in the system, there is also the GDPR Authority field.


According to the choices made here, it is ensured that people see the selected additional information as masked.

For example; If you deselect the "Personal Data Confidential" box in the X authority group, if the "Personal Data Confidential" option is selected in the additional information defined, the employees included in the X authority group will display the additional information as masked. You can authorize employees at the following stages within the scope of the authority group they belong to.

  1. Personal Data: It is used for information that does not need to be protected with the "Personal Data-Confidential" degree in terms of the information it contains, but is not wanted to be known by people other than the person it belongs to and those who need to know.
  2. Personal Data-Confidential: It is used for information that falls under the scope of special quality personal data within the framework of the Law on the Protection of Personal Data.
  3. Personal Data-Top Confidential: It is used for information that, if disclosed, used, processed or shared without permission, may cause vital damage to our dignity and interests in terms of personal security or national security, may provide benefits for a foreign state and have extraordinary results in terms of security.
  4. Financial Data: It is used for information that does not need to be protected as "Financial Data-Confidential" in terms of the information it contains, but is not wanted to be known by people other than those who need to know.
  5. Financial Data-Confidential: It is used for information that may cause unfair competition or provide an advantage to other companies providing services on the same subject in case of unauthorized disclosure.
  6. Financial Data-Top Confidential: It is used for information that, if disclosed, used, processed or shared without permission, may cause vital damage to our dignity and interests in terms of personal security or national security, may provide benefits for a foreign state and have extraordinary results in terms of security.
  7. Process Information: It is used for information that does not need to be protected as "Process Information-Confidential" in terms of the information it contains, but is not wanted to be known by people other than those who need to know.
  8. Process Information-Confidential: It is used for information that may cause unfair competition or provide an advantage to other companies providing services on the same subject, if disclosed without permission.
  9. Process Information-Top Confidential: It is used for information that, if disclosed, used, processed or shared without permission, may cause vital harm to our dignity and interests in terms of personal security or national security, may provide benefits for a foreign state and may have extraordinary results in terms of security.


ROUTE: Dashboard > System > Parameters > Additional Info


For example; If you want to separate your contacts as private customers and only certain people can view whether the member is a private customer or not, you can select the name of the additional information to be entered in the "Name" section on the Additional Information page, and which authorization group you want employees with the GDPR Authorization to see in the "GDPR Authorization" field. . The masking section ensures that the additional information entered is also masked in the database. If this box is selected, the related definition will be displayed as masked in the database.

When you go to the contact details, users without financial data-secret authorization will display the additional information as follows;




Feedback

Did you find this content helpful?
Related Contents