5 measures to ensure AGIR compliance with the GDPR

1. Publication and disclosure of our Privacy Policy

This privacy statement describes the way in which IQA - Quality Systems, Lda collects, processes, and uses personal data from its end users. This policy is now available to all users on their own profiles. 

To consult AGIR's Privacy Policy, click on Privacy Policy as illustrated in the image below. 

2. Improvements in the forms for collecting personal information

All employee personal data is now collected in a single form (Employee Form - Profile and Personal Data). 

The employee has full access to this information with editor access. Thus, the employee can exercise the rights of access, correction, objection, and deletion whenever the collected data is wrong, outdated, or abusive in regard to privacy. 

Professional data and data required for the normal functioning of AGIR (name, email, and username) cannot be edited by the end user.

3. Improvements in the control of access to the Employee Form

In order to promote the transparency of AGIR, a new functionality was created in order to allow the user to check a list of users within the organization who possess the right to access their Employee Form.

To access this information, follow the steps below:

3.1 Click on your user name and go to My Profile.

3.2 Go to the Personal Data tab, and click on Accept GDPR practices. By clicking it, you will come across the General Data Protection Regulation. At the end of this regulation, you have a list of users who can consult your information. 

4. New level of access to Employee Form

An additional access level was created - Staff Editor - which corresponds to a user in AGIR with access to a defined set of Employee Forms. This way, you can define special users with restricted access to a controlled set of Users (example: supervisors). 

To create a new Staff Editor, follow the next steps (only for AGIR Administrators):

4.1 Go to the Staff Module. 

4.2 Access the profile of the user you want to make Staff Editor and click on Employee Form Permissions. 

4.3 Then select the list of users to which this Editor should access and click on Save.

5. Collection of informed consent

You can configure a specific informed consent for personal data collection in AGIR. 

Consent is programmed into AGIR and activated at the user's next login. By activating this function, all employees will be notified of the need to approve consent.

Approval is voluntary and does not prevent the user from accessing AGIR.

To activate GDPR Consent, contact our Helpdesk.