ManualHow-to guidesData protectionAdmins
Handle an erasure request
If a person demands the erasure of their data under Article 17 of the General Data Protection Regulation, erase the data verifiably. Receipts under a retention duty are kept in blocked form.
Prerequisites
- Super admin.
Steps
- Select Compliance > Requests.
- Select Record request.
- Under Person, enter the name, e.g.
Alex Beispiel, and select the entry. - Under What is it about?, select Erasure.
- Turn on Identity verified and enter a note.
- Select Record and open case file.
- In the section Rights, at Erase, select Erase.
- In the preview, review what happens to the data of each category. Note the warnings about restricted processing, upcoming offers, open fees and participants of age.
Warning
Erasure cannot be undone, and neither can a revocation. It also erases data whose processing is restricted. It sets registrations for upcoming offers to withdrawn; the places go to the waiting list.
- If the dialog mentions consents that remain in force, turn on the consents the person withdraws with the erasure. If they have said nothing about this, ask them.
- Select Confirm erasure and Erase.
- Select Close request and under Outcome, select Done.
- Turn on “The person has received the answer” and select Close.
Result
The message “The data of “{name}” is deleted or anonymised; receipts under a retention duty are blocked.” appears. The log records the process without a name. Consents without a tick remain in force. An objection to the measuring of email opens is kept with a hash of the email address. For every revocation the organizers or the team receive an email.