imc Express and the GDPR (General Data Protection Regulation)

Compliance with the GDPR

Express places a high value on data protection and compliance with the General Data Protection Regulation (GDPR). Here are the aspects of how Express meets these requirements:

  1. Legal basis for processing: Express does not collect or process personal data without the express consent of the data subject. This is a central aspect of the GDPR.
  2. Information obligation: Persons whose data is collected are informed by Express in a timely and complete manner about this collection. All users have access to information about the data processing procedures at all times.
  3. Data minimization and purpose limitation: Express follows the principle of data minimization and purpose limitation. Only the data that is really necessary and not beyond that is collected.
  4. Security of processing: At Express, all data is stored securely on servers in Europe. State-of-the-art security technologies are used to prevent unauthorized access.
  5. Rights of data subjects: Express ensures that users can exercise their rights under the GDPR at any time. These include the right to information, correction, deletion, restriction of processing, data portability and objection.
  6. Data portability: Users have the right to receive their personal data in a structured, commonly used and machine-readable format. Express supports this through easy export functions.

These measures underscore Express's commitment to taking its users' data protection seriously and to fully complying with the requirements of the GDPR.

Staff training

All staff involved in the development of imc Express regularly attend training sessions on the GDPR.

These training sessions are designed to raise awareness of data protection and ensure that all parties involved have an in-depth understanding of the regulations and requirements of the GDPR. This is an essential element in our efforts to maintain the highest possible data protection standards.

As part of this training, developers not only learn about the legal requirements, but also how to implement them when designing and developing features in imc Express. This knowledge ensures that data protection is integrated into the system architecture and design of imc Express from the outset.

In addition to training developers, regular reviews and updates are carried out to ensure that imc Express is always compliant with the latest data protection requirements. As a result, users can be assured that every feature and capability of imc Express is developed with the highest data protection standards in mind.