GDPR and customer cases

Your organization controls customer data

You decide which enquiries to process, who gets access, what information is needed and how long to keep it. Inform your customers about the processing. A data processing agreement governs the supplier’s processing on your behalf.

Practical workspace choices

Invite colleagues who need access and revoke access when they leave. Internal notes can also contain personal data. Keep case content and attachments limited to what is necessary.

Case history records moves, assignments and other changes. It supports follow-up but does not replace your policies for access, retention or responding to data subject requests.

Email and AI

Replies display the destination address and use a valid Reply-To when present. With the managed outgoing service, the connected mailbox receives a copy to maintain the conversation. Information may therefore also remain with the email provider.

AI suggestions are optional and enabled by the organization. Consider the dialogue’s contents before requesting a suggestion. A person always reviews and sends the reply.

Requests and incidents

Contact support@kundesaker.no for export, deletion or privacy incident assistance. Identify your organization, the relevant cases and the requested action. Include as little customer content as possible.

Product features can support your procedures. They are not a guarantee that your organization’s overall processing complies with GDPR.