Personal data features

Features for helping you stay compliant with GDPR, CCPA or other data protection regulations.

In May 2018, the European Union implemented the General Data Protection Regulation (GDPR). There also exist other data protection regulations such as the California Consumer Privacy Act (CCPA). These put several requirements on businesses that handle personal data. In Ongoing WMS there are features which assist you with some of your responsibilities.

Data Protection Agreement (DPA)

A Data Protection Agreement (DPA) is an agreement between a data controller and a data processor. In the agreement with Ongoing Warehouse AB, you as a customer using Ongoing WMS has a DPA included. If you are a 3PL you will instead have a Data Sub-Processing Agreement. This is an agreement between a processer and a sub-processor. In this case an agreement between you and Ongoing. A 3PL will need to have a separate DPA with your customer, the data controller.

Personal data controller

If you are going to process personal data in Ongoing WMS on the goods owner's behalf you will need to keep track of contact details to their data protection officer (DPO) or other person responsible for personal data issues. If you run your own warehouse this person will work in your company, otherwise it is a person in your client's organization. This information is stored on the goods owner in Ongoing WMS. See documentation about goods owners to learn how to add and maintain it.

Automatic removal of personal data

When creating creating a new goods owner, the option Schedule for removal of customer data is enabled by default. This means that the customer and order info will be kept for 180 days after the order has been finished in Ongoing WMS. Note that logs as well as deleted goods owners are deleted periodically anyway for performance reasons. The following information is deleted:

Integration log files,
customer info,
address info,
order info, and
related logs.

It is possible to disable this setting if you have other requirements. This means that information regarding orders and customers will be kept until you decide to clear them. It is also possible to alter the number of days using the setting DaysToKeepCustomerInfo. Note that logs as well as deleted goods owners are deleted periodically anyway for performance reasons, but this behavior can be altered by your engineer at Ongoing if you have such a requirement.

Manual removal of personal data

Independently if you have automatic removal of personal data enabled or not it is possible to remove personal data related to one or many orders manually. This can be performed by navigating to Order => Order list, selecting one or many orders and pressing the button Forget customer. The button is found under Additional functions in the upper right corner.