GDPR readiness with Coursesuite
At Coursesuite, protecting our customer's data is fundamental to everything we do. We do not sell, trade, or rent Users personal identification information to others.
Our changes enable us to comply with the US-EU and high standards of the European Data Protection Regulation (GDPR) and take effect for new and existing users on May 25th, 2018 and thereon.
What we have been doing at Coursesuite is to ensure your data is secure and compliant with world wide standards and new GDPR requirements.
We have completed an audit of all our internal personnel data requirements and systems.
We have determined any product changes required and are putting this in place.
The Coursesuite website only requires and stores a valid user email for future use.
Sensitive and private data exchange between the Site and its Users happens over a SSL secured communication channel and is encrypted and protected with digital signatures.
We have engaged, confirmed and updated our 3rd party suppliers contracts with Coursesuite, summarised:
Fastspring (www.fastspring.com), our secure payment gateway and SaaS subscription manager are located in the US and are fully GDPR complaint as at May 25, 2018. FastSpring is committed to being fully GDPR compliant by May 25, 2018 and complies with the EU-US Privacy Shield Framework as set forth by the US Department of Commerce For more information visit FastSpring Privacy
Mailchimp (www.mailchimp.com), provides our email marketing management. Coursesuite newsletter subscription only collects the user email addresses. Purchasing SaaS access to our software will trigger entry on our Mailchimp ‘Order’ list, updated with required user order information being; 'name', 'last name', 'email', 'address' and not required 'company' if present. We use this information to help improve customer services, for system update notices and periodic emails. For more information visit MailChimp Privacy
We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection. Analytic data retentions information is set to be deleted after a period
What has not changed?
What has not changed is Coursesuite’s ongoing commitment to ensuring our users’ privacy, and to giving them control over the personal data they share with us. The privacy and the security of our users’ personal data is enormously important to coursesuite.
Contact us at any time.
The Coursesuite team
Disclaimer: this blog post has been written by Coursesuite, not lawyers. The purpose of this article is to explain what is a lawful basis and which one you can use with Coursesuite in order to understand our GDPR compliance.