The GDPR covers 3 areas of business. AuraPortal covers the most critical area, which involves everything related to the activities performed by workers when receiving and processing personal data.
| INTERACTION WITHOUT TECHNOLOGY This area refers to failures that cannot be controlled by technology. An example would be divulging a user password in conversation. The best way to prevent breaches at this area is to continuously train employees.  | | |
| INTERACTION WITH TECHNOLOGY The next area is the business activity performed by workers. To comply with the GDPR, current procedures must be performed in a certain way and new procedures must also be implemented.  | |  |
| SYSTEMS AND CYBERSECURITY Another area affected by the GDPR is the architecture and network management of the company. This area covers aspects such as network security systems to prevent cybersecurity failures.  | |
What is the AuraPortal approach to AuraPortal GDPR?
AuraPortal GDPR ensures the correct automation of the procedures as indicated by the GDPR and provides the necessary access to them. This work is of vital importance, since it ensures that employees process data in compliance with the regulation.
Features of the GDPR Accelerator
AuraPortal GDPR is a unique tool since it has features that cover the spectrum of needs for any type of company such as: Unlimited requests, Unlimited surveys, Unlimited processes, Languages, Support platform, 1000 GB storage, Initial training and Initiation.
Functions and aspects covered by the GDPR Accelerator
All in 1
Complete compliance management:
Processing, Purposes, Lawful Basis, Data subjects, Incidents, Breaches, Risks, Data Processors, External Portals, Reports, Alerts, etc.
Proactive Liability
Show that the organization has followed the 6 basic principles of the new regulation.
All Lawful Bases
Complete management of Explicit Consent including: Contractual Execution, Legal Obligation, Vital Interest, etc.
Validate Lawful Bases
Validate all personal data with lawful bases, purposes, times and processing.
Renew Lawful Bases
Lawful bases have a period of validity. Manage the renewal and the consequences of those that become invalid.
Automatic Messaging
To request Consent, inform about Privacy Policies, and any other type of notification either by email, SMS, etc.
Processing and Purpose Assistant
Step by step, all the information required for the complete management.
Data Retention Periods
Controls and manages the data retention periods of each activity / purpose, critical for compliance with the regulation.
Security Measures
All Data Processing has its associated Security Measures.
IT System Control
Register of the location of personal data processed by the organization.
Compulsory Impact Assessment
Contains an assistant and the automatic generation of impact evaluation reports.
Proof of No Assessment
Record the reasons why the Impact Assessment is not required.
List of Risks Included
This list accelerates the identification of risks and can be modified to suit the company.
Risk Mitigation Measures
Includes list of mitigating measures which the user can modify and expand according to their needs.
Guaranteed Execution of Measures
The tool guarantees the execution of designated mitigating measures, through control of workflows, alerts and reports.
Report Templates
Includes templates for the required reports. The user can modify them and include new ones.
Data Subject Rights
Portal for the data subject to exercise their rights, consult their personal data, legitimate bases, purposes, processing, retention periods, etc.
Incident mailbox
Portal for any data subject to register an incident with their personal data through a predesigned process.
Incident Management Process
Predesigned incident management process in accordance with regulatory requirements.
Security Breach Notification
Management and control of time limits, including the 72-hour deadline stipulated in the regulation.
Sanction Attenuation
Technical and organizational tool that demonstrates diligence, degree of intentionality of the infringements and cooperation with the control authority.
Communication Log with Data Processors
Creation of an Access Portal for Data Processors, with predesigned processes to comply with the regulation.
Complete Management of the Data Processor
The new regulation requires stringent control of Data Processors.
DPO Dashboard
Customized dashboard to give the DPO a complete view of regulatory compliance.
Monitoring for Audits
Monitors all the procedures carried out for complete traceability.
Creation of New Files
The user can create new files when necessary and for all areas, including those which are not related to data protection.
Creation of New Procedures
The user can create unlimited procedures, even for areas that are not related to data protection.
Flexibility
Multi-Entity tool, Languages, different aspects for different users, corporate image, add or remove screen fields, etc. and all this without any programming!
“This is practical, this is grounded, this is actionable.
This is not only the law and regulation, which are words,
it is the day to day reality. That’s the magic of AuraPortal”
Olivia Trilles, AuraPortal CEO, on GDPR Management Software.
Real-time control panel
Exclusive portal for the Data Protection Officer (DPO) which centralizes all processes involved in the GDPR, and can generate reports for correct decision making.
Personalization
100% customizable Portal.
Centralization
Focusing on decision making.
Mobility
Adaptable to smartphones and tablets.
GDPR Interfaces
¡Consiga ahora su Acelerador GDPR!
Consiga ahora un Conjunto de Procesos y Servicios orientados a ayudar a su empresa a acelerar la implantación de los requerimientos incluidos en la regulación europea para la protección de datos personales RGPD – “Regulación General de Protección de Datos”.
Gestión de Consentimientos y otras Bases Legítimas
Control de Riesgos, PIA e Brechas de Seguridad
5 usuarios Empleados Nominativos
5 usuarios externos concurrentes
POC
€0
/mes
El precio total puede variar para cada caso, Por favor, contacte con nosotros para enviarle un presupuesto personalizado.
Nota: No se incluye en esta actividad ningún tipo de consultoría de carácter legal acerca de la normativa RGPD y todo lo que no esté explícitamente declarado anteriormente.
