/
GDPR

GDPR

Owned by Enterprise IT
Last updated: Apr 22, 2024 by Shilpa K (Deactivated)Version comment
 Administrators
 Basic

What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA) to give users more control over their personal data.

SummitAI Application is GDPR-Compliant

The SummitAI application complies to GDPR rules. Under GDPR regulations, the users need to provide their consent to allow other users to view their personal data. After the user acceptance, the personal data will be stored in the SummitAI application in an encrypted form. The following fields are considered as personal data, encrypted, and stored: Joining Date, E-mail ID, Login ID, Country, Address, Contact Number, Mobile Number, State, City, Pin, and Role. If any of these fields are blank, data for the blank fields will not be encrypted and stored.

Note:

  • GDPR is not enabled on the SummitAI Application by default. The organizations need to contact the SummitAI Support team to enable GDPR on their instance of Application. For more information about enabling/dsiabling GDPR, impact of enabling/disabling GDPR on users and Application, and limitations, see Enabling GDPR and Disabling GDPR.
  • GDPR is not implemented for a SaaS (Software as a Service) Database model.

GDPR Configuration

A new GDPR CONFIGURATION page (Admin > Advanced > GDPR > GDPR Configuration) is added in the SummitAI web application. On the GDPR CONFIGURATION page, the following sections and tabs are added:

GDPR STATUS INFORMATION section

There will be an Application downtime on disabling GDPR. The downtime depends upon the amount of user data in the Application.

LOCATION MAPPING tab

Under the LOCATION MAPPING tab, the Administrators can enable GDPR only for a selected location by specifying the Domain and Location. Location is dependent on the selection of Domain.

The following scenarios describe the Location mapping:

  • If GDPR is enabled and Location is mapped, then GDPR is enabled for the users of the mapped Location. If the user is not mapped to any location, then GDPR is not applicable.
  • If no Location is mapped and GDPR is enabled, then GDPR is enabled for all the users of the Application.
  • If GDPR is enabled and only one Location is mapped, and then that Location is made inactive, then GDPR is not applicable for users from any Location.
ADMIN MAPPING tab

Under the ADMIN MAPPING tab, the Administrators can be added. The Added Administrators will be notified upon accepting or declining GDPR.

Note:

After GDPR is enabled, it it required to configure at least one user as an Administrator under the ADMIN MAPPING tab.

MESSAGES tab

Under the MESSAGES tab, the Administrators can select any pop-up message (GDPR Acceptance, GDPR Re-acceptance, Enabling/Disabling GDPR) related to GDPR and edit the Title and content of the selected Message.

Note:

While editing the message displayed on the GDPR Re-acceptance pop-up window, if you remove the ##DeclinedOn## keyword, the last date and time when GDPR was declined, is not displayed.