Since 25 May 2018, the GDPR (General Data Protection Regulation) has been applicable.
This European Union regulation, known as n°2016/679, is the reference text for the protection of personal data in the 28 Member States of the European Union. It applies to all companies that process data in Europe, whether they are European or not. Thanks to this text, the regulatory authorities – the CNIL in France – have greater powers of control and far more dissuasive penalties than before.
To ensure full compliance with the RGPD, www.allmysms.com has called on the services of ANAXIA CONSEIL, a consultancy specialising in personal data issues.
Questions relating to the GDPR:
All Data Controllers must apply the GDPR. This applies to any organisation, European or otherwise, that collects or processes the personal data of European citizens, including subcontractors.
Yes, a DPO has been appointed at allmysms. He can be contacted at dpo [at] www.allmysms.com
In order to meet all expectations, personal data retention times can be set for each allmysms account in the preferences. Default data is defined.
A data processing agreement has been signed with all our partners and subcontractors.
The data is stored on our French servers in Strasbourg and Roubaix.
In a way, the GDPR is an extension of the rules already laid down by the CNIL. It strengthens the CNIL's arsenal of rules with a European approach and broader powers for supervisory bodies. A company that complies with CNIL rules should find it much easier to comply with the GDPR.
The GDPR provides for penalties of up to 4% of turnover and €20 million for breaches of the regulation.
The commitments of www.allmysms.com:
- right to information : You can consult our personal data confidentiality policy to find out what data we collect and how we use it.
- right of access : Fill in this form to request access to or modification of your personal information.
- right to object: You may object at any time to the use of your data for marketing purposes. To do so, please fill in the following form. You will then be able to object to your data being distributed, transmitted or stored for marketing purposes.
- right of rectification: You have the option of rectifying inaccurate information about yourself in your customer area. We can also do this for you on request.
- right to erasure / right to be forgotten: An account closure system will be available shortly. In the meantime, you can contact us if you would like your account to be permanently deleted.
- right of portability: An export of all your data can be provided to you on request so that you can re-use it elsewhere. Most data can also be exported directly to your customer area.
- right to data restriction: If you express the need, we can freeze the use of your data for a period defined by you.
Your GDPR obligations and how to meet them
- right to information: As a personal data controller, you must provide your customers with a list of your subcontractors and indicate, in particular via a personal data confidentiality policy, the way in which you collect and use your customers’ data.
- right of access: Your customer area offers you a wide range of options for exporting data requested by your customers. However, if you are unable to retrieve the information requested, please contact us.
- right to object: If you no longer wish to receive communications from one of your customers, you can manually add them to your blacklist in your customer area. If the request is more global, your customer can use our marketing list blocking form to stop receiving any marketing messages from our platform.
- right of rectification: You can use your customer area to rectify inaccurate information about your customers in your customer files. You can also contact us to do this if necessary.
- right to erasure / right to be forgotten : The contact list management system allows you to delete a contact from your lists if they request it. You can also manually add a number to your blacklist.
- right to portability: The various export tools in your customer area allow you to provide your customers with an export of the data you hold on them. You can contact us if this is not enough.