Offerer online store platform is compliant with the GDPR. We also comply with the other applicable laws and apply advanced security solutions. 

General Data Protection Regulation

The purpose of the legal regulations introduced by the GDPR is to guarantee the free movement of personal data between the Member States of the European Union.

The GDPR also introduces the rules according to which the processing of personal data will be harmonized throughout the European Union. In addition, it increases the security and rights of owners of personal data.

Store on our platform is compliant with GDPR

All necessary requirements imposed by the GDPR are met by our e-commerce software.

Thus, when running an online store on the Offerer platform, your store will be compatible with the GDPR from the software side.

Key elements that have been adjusted to the GDPR:

  • The right to delete data - the ability to remove all customer data from the store
  • Access to your data - the customer can download all his/her data in XML format
  • Information bar about cookies/privacy policy
  • Collecting marketing consents for archives (logs)
  • Checkboxes to collect consents (registration, order)
  • Newsletter - the collection of consents in the Double Opt-in model

Data and server security

The security of servers and stored data is equally important. The GDPR determines the safeguards to be applied in individual cases. The new, refined infrastructure of the platform includes comprehensive, multi-aspect protection of collected data.

These are primarily solutions:

  • The server infrastructure is certified: ISO / IEC 27001: 2005 (PN-ISO / IEC 27001: 2007).
  • Data encryption and unilateral/irreversible password encryption.
  • Often two independent mechanisms to protect access to key system elements.
  • Daily backups and selective real-time backups.
  • Two independent power sources + diesel generators for 48 hours of operation.
  • Anti-DOS and DDOS protection
  • Video monitoring and motion detectors in the server room.
  • The server room from the outside is protected against unauthorized access to the facility.
  • Security system in the RFID server room and fire extinguishing system (APSAD R4)
  • Solutions High Availability guaranteeing high availability of services.

Join to 15000 trusted clients and create your own ecommerce website

Agreement for the Entrustment of Personal Data Processing

We strive to support our clients. Therefore, when running an online store on the Offerer platform, you accept free of charge, an Data Processing Agreement in electronic form, which is necessary for cooperation.

Terms and Conditions, Privacy Policy and legal issues

In order for your store to meet the requirements of the GDPR, you must have current Terms and Conditions and Privacy Policy. It is also necessary to lawfully obtain consent for data processing and marketing compliance when registering/placing an order.

 

Do you have any questions? call: + 44 752 066 5040 Email: info@offerer.com

Check the webinars