How can we keep people informed and ensure transparency?
Syntec Numérique implements a number of personal data processing operations via its website whether they concern members or non-members: membership, personal account, contact, cookies, etc…. We therefore upgraded the information notices appearing there before the fateful date of May 25, 2018. This update has also been reflected in all our procedures linked to relations with our members, prospects and, more broadly, our ecosystem.
Finally, another aspect linked to informing people on which we are making new configurations before May 25: the management of our employees’ personal data. Among other things, the RGPD requires us to provide data subjects with transparent, comprehensible and easily accessible information on the processing we carry out on their data. Based on Articles 12 to 14 of the RGPD and our register, we have modified our media to reinforce the “IT and freedoms” information notices. More complete and more precise, these notices now include a section devoted to our personal data protection policy and the additional notices required by the RGPD.
On the website, they provide our visitors with an overview of the processing of their personal data by Syntec Numérique. In our relationship with our members, we strive to make this information more accessible, so that they can access it immediately when they use our many services on a daily basis. It’s essential that they understand how and why Syntec Numérique processes their personal data and that they can exercise all the rights they enjoy with the RGPD. This objective has led us to reconfigure some of our internal procedures and in particular our membership process to incorporate the RGPD component. We are continuing our work on our procedures, which will also most certainly be impacted by the ongoing security audit. The aim of this overhaul of our procedures is to control the lifecycle of the data we collect and ensure compliance with the main principles of the RGPD.
And more specifically for human resources?
To finalize all of our RGPD work focused on information and transparency, we now need to modify our HR component, which will involve:
- The drafting of an IT charter including a section on the processing of data relating to the union’s permanent staff,
- Standardization of our new procedures in which Syntec Numérique permanent staff are involved. They will contribute to raising team awareness of RGPD issues.
Happy-end for the RGPD mission?
The obligation to provide information is reinforced by the RGPD. At Syntec Numérique, this upgrading of information notices was an opportunity to dissect its work processes to ensure compliance. Finally, a happy ending for a regulation initially perceived as a constraining new obligation!
Laurent BaudartManaging Director of France’s leading trade association for the digital sector: Syntec Numérique (2,000 member companies).