GDPR and the Right to Be Forgotten in Documoto
At Documoto, protecting your privacy is a top priority. This article details how we comply with the European Union's General Data Protection Regulation (GDPR) and specifically support Article 17 - the "Right to be Forgotten".
Article Topics
- Documoto's Privacy Policy
- Overview of GDPR's "Right to be Forgotten"
- How Documoto Forgets a User
- How to Submit a Request to Forget a User
Documoto's Privacy Policy
We value transparency in our data practices. Our Privacy Policy describes how we collect, use, process, and disclose personally identifiable information that we gather about you.
Overview of GDPR's "Right to be Forgotten"
The GDPR's Right to Erasure grants individuals the right to request the deletion of their personal data. For more information on this policy, please refer to the official GDPR guidance.
How Documoto Forgets a User
In Documoto, user deletion is not supported. Instead, Documoto utilizes a two-step process when a request to forget a user is submitted:
1. Deletion of User Records:
- Address(es)
- Submitted shopping carts via Order/Quote forms
- Any User tag(s)
- User preferences
- User Group(s) assignments
2. Anonymization of User Information:
- First Name updated to "Former"
- Last Name updated to "User"
- Username updated to a random, unique value
- Email Address updated to 'null'
- User encrypted key (UEK) is updated a to random, unique value
This process ensures that sensitive user information is permanently removed from the system, maintaining privacy and adhering to data protection standards.
How to Submit a Request to Forget a User in Documoto
To request that a user be forgotten in Documoto, please contact:
- Documoto Support (support@documoto.com)
- Your Customer Success Manager
When submitting your request, please include:
- The user's identification details
- Any additional relevant information.