Individual's Rights

This section lists the GDPR requirements to the individual's rights and describes how Lanteria HR meets these requirements.

The right to be forgotten

The right to be forgotten is also known as the ‘right to erasure’. EU citizens have the right to request deletion or removal of their personal data. They don’t have to put forth any particular reasons to substantiate their request. If there is no compelling reason for a company to process personal data, they have to delete it immediately.

In Lanteria HR, employee data can be deleted or anonymized by HR:

• Data deletion
  HR person is able to delete employee master record and all the connected records with one click. If the data storage is SQL, upon deleting an employee record in SharePoint, all the related data will be deleted from the SQL tables.
• Data anonymization
  HR person is able to keep employee records but remove all identification data (Employee name, account, phone, SSN, email etc.). HR can click the Data Anonymization button for an employee to replace the employee name with the unique identifier, clean the sensitive data and data from other fields defined during the data anonymization setup. The data can also be anonymized for the candidates whose personal information has been recorded into the database during the recruiting process.

The right to be informed

The right to be informed explains how companies and organizations are obligated to provide information of how they process collected data. The individual should be informed through a private notice. Lanteria HR provides information on what kind and type of the employee data is stored in the system (data structure). Under Settings, the user can check the Employee Related Data Structure page to view all the SharePoint lists that store the employee data (list name, description, fields with types and description).

The right of access

The right of access concerns the ability of individuals to access their personal data and obtain confirmation that their personal data is being processed.

Lanteria HR provides employees with access to personal data via Employee Self Service.

The right to rectification

The right to rectification defines that individuals have the right to have their personal data corrected if it’s incomplete or inaccurate.

Lanteria HR provides employees with ability to correct personal data or request changing personal data from HR team. For the employees to be able to edit their personal data, in the Employee Card Designer, when creating/editing section with the personal data, add ES Employee to the Edit Roles.

The right to restrict processing

The right to restrict processing explains that individuals have the right to block processing of personal data, so that companies can only store it.

Lanteria HR stores employee data only for internal HR processes and doesn’t provide it for any 3rd parties.

The right to data portability

The right to data portability concerns the right of individuals to obtain and reuse personal data for their own purposes on different services and platforms.

Lanteria HR allows exporting data to portable formats (.csv, excel, word, pdf).

The right to object

The right to object means that individuals can object to processing in fields such as direct marketing and scientific or historical research. Even processing that is based on the performance of tasks in the public interest can be objected.

Lanteria HR collects and stores employee data only for purposes defined by labor law.