# Your CRM and GDPR

> Why and how Salesflare's CRM will be GDPR compliant. What your CRM being GDPR compliant means to you. And what you should do to be GDPR compliant as well.

Source: https://blog.salesflare.com/your-crm-and-gdpr-769120282357
Language: en
Published: 2018-03-12  ·  Updated: 2026-06-30

---
<!-- QUARANTINED — not auto-converted.
     Medium import: .graf markup (one of the 50 identified in FINDINGS)
     Body below is the chrome-stripped source HTML, awaiting hand conversion. -->

<header></header>

<h2>Why and how Salesflare will soon be GDPR compliant</h2>
<p id="6d47" class="graf graf--p graf-after--h4">No doubt about it: <strong class="markup--strong markup--p-strong">Salesflare will be GDPR compliant</strong> before the deadline of Friday May 25 2018. 💪</p>
<p id="d622" class="graf graf--p graf-after--p">Operating from <strong class="markup--strong markup--p-strong">the center of Europe</strong>, just a 60km drive from where GDPR has been conceived, discussed and agreed upon, we probably take this a tad more seriously than most.</p>
<p id="3191" class="graf graf--p graf-after--p">You’re not 100% sure <strong class="markup--strong markup--p-strong">what GDPR means for you and your CRM</strong>?</p>
<p id="9ce3" class="graf graf--p graf-after--p">It’s really not that complicated. I’ll get you <strong class="markup--strong markup--p-strong">up to speed in a whim</strong>.</p>
<p id="9a57" class="graf graf--p graf-after--p">Let’s go through this together. 👊</p>

<hr class="section-divider">

<h2 id="d1fa" class="graf graf--h3 graf--leading">Is GDPR worth the&nbsp;panic?</h2>
<p id="4d6d" class="graf graf--p graf-after--h3">We’ve been overwhelmed with quite a GDPR panic lately. 😵</p>
<p class="graf graf--p graf-after--figure">There’s tons of talk about the possible <strong class="markup--strong markup--p-strong">fines</strong>. Companies sending dedicated emails and web pages with <strong class="markup--strong markup--p-strong">vague statements</strong> about GDPR compliance. <strong class="markup--strong markup--p-strong">Consultants and lawyers</strong> appearing out of nowhere.</p>
<p id="b124" class="graf graf--p graf-after--p">A fellow founder recently told me: “This is going to be like the Y2K bug. Lots of craze and then nothing really happens in the end.” 😏</p>
<p id="32e9" class="graf graf--p graf-after--p">Probably the panic is indeed a bit too much.</p>
<p id="86ef" class="graf graf--p graf-after--p graf--trailing">But the difference with the Y2K bug is that the current GDPR panic will have a <strong class="markup--strong markup--p-strong">noticeably positive effect</strong> in the end.</p>

<hr class="section-divider">

<h2 id="b56c" class="graf graf--h3 graf--leading">The positive effect of&nbsp;GDPR</h2>
<p id="b284" class="graf graf--p graf-after--h3">Up till recently, enforcement of European data privacy and security regulation was quite vague and not really strict. Everybody handled it in a different way. Some better than others.</p>
<p id="9eee" class="graf graf--p graf-after--p">GDPR changes that. Despite the fact that the guidelines on practical implementation are not super concrete, the <strong class="markup--strong markup--p-strong">high level guidelines</strong> have been set. 🙌</p>
<p id="0558" class="graf graf--p graf-after--figure graf--trailing">It is good for companies to have this guidance. Plus it also means that customers and the general public know what to expect. Because every company now needs to follow <strong class="markup--strong markup--p-strong">the same framework</strong>.</p>

<hr class="section-divider">

<h2 id="4e35" class="graf graf--h3 graf--leading">What GDPR means for Salesflare’s CRM</h2>
<p id="e66f" class="graf graf--p graf-after--h3">We’ve always taken <strong class="markup--strong markup--p-strong">data privacy and security</strong> serious while building Salesflare’s CRM platform, as data is at the core of what we do.</p>
<p id="288d" class="graf graf--p graf-after--p">If you like to read more about some of the measures we take on this level, check out <a class="markup--anchor markup--p-anchor" href="https://howto.salesflare.com/salesflare/privacy-security-how-do-you-keep-my-account-secure-and-my-data-safe">this article in our knowledge base</a>. 👈</p>
<p id="b3df" class="graf graf--p graf-after--p">Still, the GDPR exercise we’re currently going through forces us to map exactly how we handle data, for customers and for ourselves. The<strong class="markup--strong markup--p-strong"> benefits</strong>:</p>
<ul class="postList">
<li id="bd1a" class="graf graf--li graf-after--p">It improves the processes we follow;</li>
<li id="c4ca" class="graf graf--li graf-after--li">Makes us review agreements with customers and suppliers;</li>
<li id="bde2" class="graf graf--li graf-after--li">And generally makes our data handling more future proof.</li>
</ul>
<p id="553c" class="graf graf--p graf-after--li">In short, it <strong class="markup--strong markup--p-strong">further professionalizes</strong> the way data is handled. And asks us to produce a ton of <strong class="markup--strong markup--p-strong">documentation</strong>.</p>

<hr class="section-divider">

<h2 id="ebd3" class="graf graf--h3 graf--leading">GDPR in 2&nbsp;minutes</h2>
<p id="5892" class="graf graf--p graf-after--h3">The European General Data Protection Regulation (GDPR) changes the way <strong class="markup--strong markup--p-strong">personal data on European Citizens and Residents</strong> is handled.</p>
<p id="877d" class="graf graf--p graf-after--p">If you’re keeping data on European Citizens/Residents you need to comply with the regulation, <strong class="markup--strong markup--p-strong">regardless of where you’re based or headquartered</strong>.</p>
<p id="1af3" class="graf graf--p graf-after--p">Personal data is basically <strong class="markup--strong markup--p-strong">any piece of data that could be used to identify someone</strong>, when used on its own or in combination with other data. That makes the concept of personal data very broad.</p>
<p id="2bfb" class="graf graf--p graf-after--p">There’s <strong class="markup--strong markup--p-strong">3 parties</strong> in the relationship:</p>
<ul class="postList">
<li id="8a2b" class="graf graf--li graf-after--p">The data subject: the person that is the subject of the personal data</li>
<li id="836c" class="graf graf--li graf-after--li">The data controller: the company that decides to keep and control this data</li>
<li id="ed31" class="graf graf--li graf-after--li">The data processor: the company that processes the data on behalf of the controller</li>
</ul>
<p id="a726" class="graf graf--p graf-after--li">As Salesflare, we are a <strong class="markup--strong markup--p-strong">data processor</strong> for our customers. Plus we are a <strong class="markup--strong markup--p-strong">data controller</strong> as well when marketing to prospects, providing customer service, keeping data on employees for HR reasons,&nbsp;…</p>
<p id="6816" class="graf graf--p graf-after--p graf--trailing">👉<strong class="markup--strong markup--p-strong"> If you’re a customer of Salesflare, we will soon provide you with the necessary legal documents to make sure that you as a data controller (controlling data about your customers, the data subjects) are employing a data processor (that’s Salesflare) who complies with the regulations.</strong></p>

<hr class="section-divider">

<h2 id="b483" class="graf graf--h3 graf--leading">The principles</h2>
<p id="838b" class="graf graf--p graf-after--h3">The principles set out in the GDPR text are simple, logical and timeless:</p>
<ul class="postList">
<li id="9d68" class="graf graf--li graf-after--p">The processing of the data needs a <strong class="markup--strong markup--li-strong">legal basis</strong></li>
<li id="8606" class="graf graf--li graf-after--li">This <strong class="markup--strong markup--li-strong">purpose</strong> of the processing needs to be <strong class="markup--strong markup--li-strong">specified explicitly</strong></li>
<li id="7873" class="graf graf--li graf-after--li">The data processing needs to stay <strong class="markup--strong markup--li-strong">limited to this purpose</strong></li>
<li id="01b4" class="graf graf--li graf-after--li">Data can only be collected and kept <strong class="markup--strong markup--li-strong">as much and long as needed</strong></li>
<li id="9202" class="graf graf--li graf-after--li">There needs to be <strong class="markup--strong markup--li-strong">openness</strong> on how the data is processed</li>
<li id="8290" class="graf graf--li graf-after--li">People have the <strong class="markup--strong markup--li-strong">right</strong> to have their personal data transferred, modified or deleted</li>
<li id="e026" class="graf graf--li graf-after--li">The <strong class="markup--strong markup--li-strong">quality</strong> of the data needs to be maintained</li>
<li id="4828" class="graf graf--li graf-after--li">The data needs to be kept <strong class="markup--strong markup--li-strong">securely</strong></li>
<li id="2fa4" class="graf graf--li graf-after--li">Companies can be held <strong class="markup--strong markup--li-strong">accountable</strong> to follow these principles</li>
</ul>
<p id="e4e6" class="graf graf--p graf-after--li">Pretty logical, ain’t it? 😏</p>

<hr class="section-divider">

<h2 id="41bc" class="graf graf--h3 graf--leading">GDPR meets CRM: what Salesflare is working&nbsp;on</h2>
<p id="2895" class="graf graf--p graf-after--h3">As I explained above, Salesflare needs to be GDPR compliant both as a controller and as a processor of personal data. What’s relevant to you as a customer is our role as a processor (for you as a controller).</p>
<p id="4ff6" class="graf graf--p graf-after--p">As a data processor, we’re working on:</p>
<ul class="postList">
<li id="db9a" class="graf graf--li graf-after--p">An updated <strong class="markup--strong markup--li-strong">privacy policy &amp; terms</strong>&nbsp;and a data processing agreement (UPDATE: you can now <a href="https://salesfla.re/dpa">request a DPA for signing here</a>)&nbsp;✔</li>
<li id="88bf" class="graf graf--li graf-after--li">Keeping all your personal <strong class="markup--strong markup--li-strong">data</strong><strong class="markup--strong markup--li-strong"> in Europe</strong> (it’s already there, on Google Cloud servers in Belgium, so that part is easy)&nbsp;✔</li>
<li id="32be" class="graf graf--li graf-after--li">Organizing an additional and professional <strong class="markup--strong markup--li-strong">security assessment</strong> to guarantee your personal data is 100% safe&nbsp;✔</li>
<li id="d290" class="graf graf--li graf-after--li">An internal <strong class="markup--strong markup--li-strong">mapping of all processed data</strong>, in which we document compliance with the above principles, making <strong class="markup--strong markup--li-strong">changes</strong> where needed&nbsp;✔</li>
<li id="9bf7" class="graf graf--li graf-after--li">Getting contracts with our <strong class="markup--strong markup--li-strong">subprocessors</strong> to assure they are GDPR compliant too&nbsp;✔</li>
<li id="3851" class="graf graf--li graf-after--li">Appointing <strong class="markup--strong markup--li-strong">responsibles</strong> and building <strong class="markup--strong markup--li-strong">processes</strong>: this is to stay compliant, to guarantee people can have their data transfered, modified, deleted,&nbsp;… and to notify the official instances in case of data breaches (would be a first).&nbsp;✔</li>
</ul>
<p id="0bfc" class="graf graf--p graf-after--li graf--trailing">It’s a whole bunch, but the work is <strong class="markup--strong markup--p-strong">totally worth it </strong>👊</p>

<hr class="section-divider">

<h2 id="ca1e" class="graf graf--h3 graf--leading">What you should work on to be GDPR compliant</h2>
<p id="3052" class="graf graf--p graf-after--h3">Salesflare being GDPR as your CRM is one important step, as it <a href="https://blog.salesflare.com/best-customer-database-software">holds your customer data</a>, but it’s definitely not the only step to take.</p>
<p id="8a84" class="graf graf--p graf-after--p">Summarizing in very short:</p>
<ul class="postList">
<li id="53e8" class="graf graf--li graf-after--p">Appoint responsibles, including a <strong class="markup--strong markup--li-strong">Data Protection Office</strong>r (DPO)</li>
<li id="c3f1" class="graf graf--li graf-after--li">Educate everyone in the team, create <strong class="markup--strong markup--li-strong">awareness, policies and guidelines</strong></li>
<li id="097e" class="graf graf--li graf-after--li">Update your <strong class="markup--strong markup--li-strong">legal documents</strong>, including your <a href="https://www.iubenda.com/en/help/36387-privacy-policy-template#what-is">privacy policy</a></li>
<li id="f0ac" class="graf graf--li graf-after--li">Create <strong class="markup--strong markup--li-strong">Records of Processing Activities</strong> (RPA) and map your data</li>
<li id="cae7" class="graf graf--li graf-after--li">Make sure your <strong class="markup--strong markup--li-strong">vendors and third parties</strong> are GDPR compliant (like Salesflare and many others)</li>
<li id="8786" class="graf graf--li graf-after--li">If you hold sensitive data, do a <strong class="markup--strong markup--li-strong">Data Protection Impact Assessment</strong></li>
<li id="50ba" class="graf graf--li graf-after--li">Work on things like getting <strong class="markup--strong markup--li-strong">consent</strong> from data subjects &amp; <strong class="markup--strong markup--li-strong">informing</strong> them</li>
<li id="1867" class="graf graf--li graf-after--li">Create <strong class="markup--strong markup--li-strong">processes</strong> to handle requests of data subjects to access, modify,&nbsp;… to handle data breaches and to ensure continued compliance</li>
<li id="b75d" class="graf graf--li graf-after--li"><strong class="markup--strong markup--li-strong">Register</strong> with your local data protection authorities</li>
</ul>
<p id="7803" class="graf graf--p graf-after--li">Still sounds a tad abstract? 🙃</p>
<p id="bb1a" class="graf graf--p graf-after--p">No worries. Checklists like <a class="markup--anchor markup--p-anchor" href="https://gdprchecklist.io/"><strong class="markup--strong markup--p-strong">GDPR Checklist</strong></a> or GDPR compliance apps like <a class="markup--anchor markup--p-anchor" href="https://ecomply.io/"><strong class="markup--strong markup--p-strong">ECOMPLY</strong></a> are here to help you nail the details. Check them out! 👈</p>

<hr class="section-divider">

<h2 id="e5b9" class="graf graf--h3 graf--leading">In short</h2>
<p id="671b" class="graf graf--p graf-after--h3">Look past the panic, the smoke and mirrors, and the money crazed consultants. Focus on the real stuff and get grinding.</p>
<p id="c406" class="graf graf--p graf-after--p">It’ll surely take some documents, meetings and emails to get compliant, but it will make our parallel data world a much better place.</p>
<p id="8de9" class="graf graf--p graf-after--p">If you need help, we’re in it together. Check out the discussions on <a class="markup--anchor markup--p-anchor" href="https://www.facebook.com/groups/955764811235146/">this EU GDPR Facebook group</a>, the resources just above,&nbsp;… and get going. 💪</p>
<p id="3ac6" class="graf graf--p graf-after--p">Good luck!</p>

<hr class="section-divider">

<p id="dfc0" class="graf graf--p graf--leading"><em class="markup--em markup--p-em">We hope you liked this post.</em></p>
<p id="9b1d" class="graf graf--p graf-after--p"><em class="markup--em markup--p-em">If you did, spread the word! </em>😍</p>
<p id="6346" class="graf graf--p graf-after--p"><em class="markup--em markup--p-em">For more hot stuff on startups, growth marketing and sales</em></p>
<p id="de4e" class="graf graf--p graf-after--p">👉 <a class="markup--anchor markup--p-anchor" href="https://salesflare.typeform.com/to/Pi0dBQ"><strong class="markup--strong markup--p-strong"><em class="markup--em markup--p-em">subscribe here</em></strong></a></p>
<p id="677e" class="graf graf--p graf-after--p graf--trailing">👉 <strong class="markup--strong markup--p-strong"><em class="markup--em markup--p-em">follow @salesflare on </em></strong><a class="markup--anchor markup--p-anchor" href="https://twitter.com/salesflare"><strong class="markup--strong markup--p-strong"><em class="markup--em markup--p-em">Twitter</em></strong></a><strong class="markup--strong markup--p-strong"><em class="markup--em markup--p-em"> or </em></strong><a class="markup--anchor markup--p-anchor" href="https://www.facebook.com/salesflare/"><strong class="markup--strong markup--p-strong"><em class="markup--em markup--p-em">Facebook</em></strong></a></p>
---

## Related

- [The 20 Best Sales Books Elon Musk Is Probably Reading](https://blog.salesflare.com/best-sales-books-of-all-time.md)
- [36 killer tools to turbocharge your startup stack](https://blog.salesflare.com/36-killer-tools-to-turbocharge-your-startup-stack-465061f917b7.md)
- Previous: [Power up your pipeline](https://blog.salesflare.com/power-up-your-pipeline.md)
- Next: [Adam Hempy of Better Proposals](https://blog.salesflare.com/adam-hempy-of-better-proposals-a3c7f2c76283.md)
