GDPR: What's new in Apptus eSales data management

On May 25 2018, the European Union's General Data Protection Regulation - GDPR - will become the new primary law regulating how companies treat and protect the personal data of EU residents.

At Apptus we have adapted our product and created simple guidance to help you cope with this new regulation.

Main changes

With GDPR in effect, visitors to retailer sites will have several new rights. 
The most important ones that are relevant to  Apptus eSales are:

  • Right to access

  • Right to be forgotten

  • Right to data portability.

Apptus eSales GDPR API

The GDPR API is part of the Apptus eSales  Web API. It executes queries and enabling functions that support the right to access, the right to data portability, and the right to be forgotten.

To ensure Apptus eSales data is fully compliant with GDPR, retailers may need to implement functions for managing GDPR related requests directly from visitors.

More information regarding GDPR compliance with Apptus eSales without the Web API can be found at  Apptus Connector Docs for Java, .NET, or PHP.

Apptus solutions for GDPR compliance is available from eSales version 3.37.1.

Keep in mind

The two main concerns for you as retailer regarding GDPR compliance when using Apptus eSales are to:

  • Plan for how you will manage and use the GDPR API to export, download, and remove behavioural data.

  • Avoid creating and using customer keys based on personal information such as user names or e-mail addresses.

Further information

More technical information on Apptus eSales andGDPR data management is available here.

Do not hesitate to let us know if you have questions or thoughts on how GDPR will influence your organisation.

Please contact your Apptus account manager for help and support.