GDPR
GDPR Regulations
Expressed Consent
In order to satisfy the EU General Data Protection Regulation (GDPR), X-CD has implemented a number of software changes. The fundamental change requires all client contacts prior to submitting any personal information to firstly agree to the system use terms and conditions which are specifically designed by X-CD and our client’s legal team to satisfy the GDPR.
Without agreeing to the terms and conditions the contact cannot continue. At a minimum, each contact will acknowledge that they are:
i Submitting personal information, including abstracts, papers, PPTs, videos, handouts and other data, in order to participate in Client conference;
ii Submitting personal information for registering to attend a Client conference
iii Submitting personal information to become or remain a member of the Client organization or society.
The contact must agree that they are submitting their personal identifiable information and are uploading their abstract and other data of their own free will and they agree that they will not enter into any legal action against X-CD (the Data Processor as defined in the GDPR) or Client (the Data Controller as defined in the GDPR) for any accidental or unlawful destruction, loss, alteration or unauthorized disclosure of their personal information, abstract, papers, PowerPoints or any other data. This acknowledgement is time stamped and is kept in the system in the unlikely event that there is a GDPR complaint against any party.
In addition to the express consent provided by contacts our clients must also agree that they will not collect from their submitters sensitive data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, national identification numbers, passport numbers, credit card numbers, biometric data for the purpose of uniquely identifying a person, data concerning health, data concerning a natural person’s sex life or sexual orientation or data leading to discrimination, identity theft or fraud, financial loss, damage to the reputation or collect any data from minors. This is not the full list of restrictions and clients are advised that they are responsible for the data they choose to collect and should consult their legal counsel if they have questions.
GDPR Requirements with regard to Requests to Remove Data
Additionally, under the GDPR our clients are required to erase personal data without undue delay (i) if the data is no longer needed; (ii) if a contact objects to processing; or (iii) if the processing was unlawful. Where there has been a request to erase data, X-CD clients can immediately use the system backend tools to do so without our intervention.
GDPR Requirements Relating to Email
X-CD has developed an email management module that allows our clients to meet the standards set by the GDPR. The system allows our clients to manage a user’s email preferences and obtain express consent for communications. It allows client administrators to create as many consent categories as required. The platform by default has a primary “Do Not Contact” category which by default excludes those contacts selected from receiving emails, except transactional emails e.g., confirmation emails related to registration or submission of abstracts. In summary, the system also allows our clients to target or exclude people from e-mailings according to the user’s consent categories.
All emails contain footer text (customized by the Administrator) which links to a screen with the consent categories and the status for that user. The user may view and update their consent status. A user may also update their consent status by logging into the system and updating their status.
X-CD strives to meet our customer security and compliance needs. If this attestation and summary does not suffice for your needs, please communicate directly with us at sales@x-cd.com and we will address specific questions you may have.
For More Information
Contact- sales@x-cd.com
Contact Us
Locations
- Toronto, Ontario
- San Francisco, California