How to process a GDPR redaction for a customer

Summary

This guide explains how to process a GDPR redaction request to delete a customer’s personal data. This functionality is helpful for addressing GDPR requests from customers.

Important Notes

• Feature Enablement: The GDPR redaction feature is not enabled by default. To enable it, submit a Zendesk ticket through our portal.
• Permissions: Ensure you have the appropriate permissions. You need to enable the ‘Manage GDPR Deletion Requests’ option under the Customer module settings. This option is disabled by default and can be found at the very bottom of the settings page.
  
  

For details on configuring permissions by role, refer to our permissions guide.

Step-by-Step Guide

1. Locate the Customer

   • Search for the customer in the system.
   • Open their profile and navigate to the Personal Details tab.
     
     
     
     

2. Request Data Deletion

   • Click the ‘Request Data Deletion’ button.
     
     
     
     

3. Verify Deletion Eligibility
   Ensure the following prerequisites are met before proceeding:

   • The customer has no active memberships.
   • The customer is not paying for any ongoing joint memberships.
   • The customer has no upcoming bookings.
   • The customer has no outstanding penalties or payments.

4. Select the Deletion Date

   • Choose a deletion date (default: tomorrow).
   • Note: The earliest possible deletion date is 24 hours from the request date. You cannot select today’s date.
     -> Please note that it will take 48 hours for the deletion to be fully processed.
     
     

5. Submit the Request

   • Click ‘Request Data Deletion’.
     
     
     
     
   • Confirm the action in the pop-up prompt. This action is irreversible and will:
     • Delete all customer data.
     • Permanently disable the customer’s account.
       
       
       
       
   • Click ‘Request Data Deletion’ again to finalize.

6. Confirmation

   • A confirmation popup will appear, indicating that the customer’s record has been successfully deleted.
     
     

This process ensures GDPR compliance by securely and permanently removing customer data as per regulations.