As you are storing customer information, the customer has certain rights under GDPR. This section describes them and how to handle them.
The right to access, update or to delete the information you have on the customer
If the customer requests access to view their data, you can look them up on the CRM locally on the RMS-Register if in store and show the customer. Or look them up via the Web Portal and export and provide this to the customer. If the customer requests an update to their information, this can be made on the RMS-Register or via the Web Portal. If the customer wants their data deleted from RMS-Register, known as “the right to be forgotten” you can delete them from the RMS-Register client or the Web Portal.
The right of rectification
The customer has the right to have their information rectified if that information is inaccurate or incomplete. This can be implemented on the RMS-Register client or the web portal.
The right to object
The customer has the right to object to your processing of their Personal Data. You can configure this as questions on the CRM see above under “Gaining Authority to store the data”. If they are existing, you can either delete them or not enter them on the system if they are new.
The right of restriction
The customer has the right to request that you restrict the processing of their personal information. You can record their preferences under the CRM. It is your responsibility to ensure they are met. For instance, if they state they are OK for appointment text reminders, but do not email, then do not email them.
The right to data portability
Customers have the right to be provided with a copy of the information you have on them in a structured, machine-readable and commonly used format. You can export their information to an Excel Spreadsheet via the Web Portal.
The right to withdraw consent
Customers also have the right to withdraw their consent at any time where you relied on their consent to process their personal information. You can update this either on the Web Portal or via the RMS-Register client. You could delete them entirely or alter an answer to a question from yes to no. For instance, “Accept Marketing”, change the answer from yes to no. You may then need to alter this in any marketing tools that you use.