TimePlan and EU general data protection regulation (GDPR)
What does the General Data Protection Regulation mean for TimePlan’s customers?
The much-discussed EU General Data Protection Regulation (GDPR) became effective on 25th May, 2018. Here is an overview of what the new rules will mean to you as a TimePlan customer, and how TimePlan Software A/S is affected by them.
TimePlan Software A/S is working with staff administrative data. Therefore, we focus only on personal data relating to payroll and human resource tasks, although the EU GDPR contains many other aspects.
We have made an overview of the most important questions and answers regarding data processing agreements, data storage and data access for TimePlan Software’s customers.
Questions and answers
1. What are the biggest and most important changes in personnel management with the EU GDPR?
The new EU GDPR contains significant new requirements for documentation when it comes to the processing of personal data and an underlying expectation of increased accountability when dealing with personal data. Some of the main points are new documentation requirements, insights, data processing agreements, and employee training. As a company, we must be able to document that personal data is processed legally and stored securely, including where, how, and why we store personal data and who has access to the data.
TimePlan Software A/S works in collaboration with our customers’ own internal handling processes, ensuring that the data is securely stored with restricted access. Employees that require access to the data will be allocated unique user credentials that are password protected.
2. Where does TimePlan Software A/S store customers’ personal data?
Depending on the specific agreement with the individual customer, we store our customer’s personal data in Denmark.
3. Who has access to TimePlan customers’ personal data?
Only the relevant employees at TimePlan Software A/S have access to TimePlan customers’ personal data. Our employees are trained and understand the sensitivity of processing personal data and are, of course, subject to professional confidentiality. Access to data is on a ‘need to know’ basis and only in connection with the agreement between us and the customer for support, maintenance and updating purposes.
4. What changes will be made in TimePlan as a result of the new Personal Data Regulation?
Based on the new regulation the following changes have been applied in TimePlan prior to 1 May 2018:
1. Enhanced User Password Management.
2. Encryption of fields in the database, if these are marked as personal.
3. Ability to delete data based on selected criteria.
4. Report of rights profiles.
5. User Rights Report.
6. Managing personal fields on printouts.
5. As a TimePlan customer, do I automatically receive a new data processing agreement?
Yes. Our team has prepared up-to-date data processing agreements, which all our customers receive before the GDPR becomes effective. The new data processing agreements will comply with all the requirements of the EU GDPR so that you have the required documentation in place should you ever need validation from an external authority.
To ensure optimal and documentable compliance with the necessary technical and organizational security measures, an incorporated and validated stringency is required. We ensure this by using our own agreement and an ISAE 3402 statement so that you as a customer know that our employees truly comply with the standards. It can thus be documented and linked to your company’s own compliance with the regulatory framework.
6. Which version of TimePlan contains the latest GDPR changes?
TimePlan version 7, which is the latest operating version, automatically contains the latest GDPR changes. If you, as a TimePlan customer, have not already upgraded to version 7, this is one of the advantages of doing so.
Do you have other questions regarding the EU GDPR and TimePlan?
Then please contact TimePlan consultant Ulrik Willumsgaard, telephone +45 9840 2020 or ucw@timeplan-software.com.
TimePlan Support
As a customer, you have access to the TimePlan Support from Monday to Thursday from. 7:30 am – 4:30 pm CET and Fridays from 7:30 am – 4:00 pm CET.
You can reach the support via phone and our online support system JIRA Service Desk, where all inquiries are recorded and actioned.
TimePlan Support strives to provide both a professional and personal service, so as a TimePlan customer you can have your questions answered quickly and get on with your employee scheduling, time registration and HR administration in TimePlan.
