General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) is a regulation by which the European Parliament, the Council of the European Union, and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). It also addresses the export of personal data outside the EU.
The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.
It becomes enforceable from May 25, 2018.
It is to the best of Boyum IT Solutions A/S ability that Boyum Cloud adhere to privacy by design.
Boyum Cloud is an extension for SAP Business One and can be used as a cloud service. Boyum Cloud synchronizes relevant data between SAP Business one and Microsoft Azure to take advantage of advanced features. Only the data necessary to use the extended functionality will be synchronized. The synchronization is done via the standard API of SAP Business One.
All synchronized data is encrypted end-to-end and sent via HTTPS.
Depending on the customer, the data is stored in the US region or in the European Union. When the subscription is terminated, the account is deactivated and the customer is informed about the imminent deletion of the data.
The following summary shows which personal data is stored in an Azure database via synchronization or by manually entering Boyum Cloud.
|Personnel master data||Adding operators for the shop floor terminal||The employees of the shop floor are represented on Boyum Cloud as “Operators”; this information is collected at the Operator data object. The mandatory personal data collected here are: Fist name Middle name and Last name. Only this data is synchronized with SAP Business one employee master data.|
|User and Operator||Assignment of license to user and operators||We have no connection between the customer system and Boyum Cloud directly. The licenses and users are managed in our Boyum Portal from the customers themselves. In Boyum Cloud we assign licenses to user and operators. For the assignment to users we use and store only the email address. For the assignment to operators we link this to our Operator-ID.|
|Company information||Identify general settings||We use company information to find out relevant general settings like decimal places or local currency. For that we store the company name and the country as personal data.|
|External documents||Manage external documents||Boyum Cloud allows you to upload any file as an attachment to a product request via an upload and store it in Boyum Cloud.|
|Production order||Manage customer specific production orders||We plan and monitor SAP Business One production orders in Boyum Cloud. Production orders can contain the customer name and customer number.|
|Time receipts||Time recording for production operations||As part of the production data collection functionality, we record the time effort of the production operations. This information could be reported directly by personnel when they connect to the shop floor terminal and report a time receipt. In this case a personnel ID is linked to a time receipt.|
|Inventory postings||Material recording for production operations and receipts from production||As part of the production data collection, we record used material and create a warehouse transaction in standard SAP Business One. These transactions are linked to the Personal ID and are stored in Boyum Cloud for traceability.|
|Quality data||Collection of quality data for inspection orders||For quality control, Boyum Cloud creates inspection orders with test steps. The inspection order can contain the business partner name.|
The employees can record the actual quality data for an inspection order. In this case the operator ID is linked to the quality collection data entry.