GDPR compliance page — SimplyBook.me

Cited by

Facts read from this source

• DPA available Report an error

  “We have prepared a Data Processing Agreement to be concluded between you and SimplyBook.me Ltd, and made it available on our website”

• Subprocessors listed in DPA Report an error

  “Data Processing Agreement part of the T&Cs for users, includes a list of sub-processors.”

• Soap encrypted at rest Report an error

  “Medical information is considered as "sensitive personal data" and it may be stored in the system, in a component called "SOAP". The SOAP component has now been enhanced to be encoded at rest so that no one can have access to this information, even if they break into the user’s system, or even into SimplyBook.me servers UNLESS they have the secret key.”

• HIPAA feature Report an error

  “HIPAA FEATURE: For users that want to harden security even more, the HIPAA Custom Feature is available to the Standard and Premium Subscriptions.”

• HIPAA feature capabilities Report an error

  “This allows users to set automatic system log out after predefined time, like 20 minutes after the system was being used. It also allows users to get notifications upon each login into the system. Furthermore, this feature disables personal data to be sent over email or SMS, it removes client’s and service names from these notifications, making it harder for snoopers to see personal data.”

• Double authentication Report an error

  “Double authentication module for enhanced login security into systems.”

• Double authentication access Report an error

  “CUSTOMER SUPPORT REQUESTS: Upon activation of the double authentication feature of the System, we DO NOT have any access to your account and system. However, when you need quick assistance from our support team, you may give our representative a temporary code so they can help them out with settings if needed.”

• Delete history module Report an error

  “Delete history module that enables users to set how long data is needed to be kept on data subjects that have made bookings within the system. If you do not need to keep the data, then this tool is great to auto delete data after for example 30 days(depends on user settings) since booking is completed.”

• Terms conditions module Report an error

  “Terms & Conditions module where users can set their own T&C along with Privacy policy where they detail in human readable language how they plan to use the data”

• Cancellation policy module Report an error

  “Cancellation Policy module where users can detail how their cancellation policy is enforced”

• Free custom features count Report an error

  “We provide 4 Custom Features, free for all:”

• Data access groups Report an error

  “Access to 3 groups of personal data PERSONAL DATA Company info usually publicly available on the internet in order for clients to be able to book. System users info (the ones who provide the service) usually available on the internet for all to see so clients can choose them to book Client info Never available on the internet for other than system users to see”

• Data print and delete Report an error

  “Each of these groups can access an interface to see and print out all information stored in the SimplyBook.me system. Additionally, upon request, all client details can be deleted with the use of a simple button.”

• Deleted data anonymized Report an error

  “As client data is often part of statistical information about sales and bookings, the data is not all deleted but made completely unrecognisable but still kept usable for statistic purposes.”

• Admin data access authentication Report an error

  “Please note that these records can only be accessed by users after a simple authentication procedure by re-entering the password and if they have double authentication, they will be asked for a verification code to get access.”

• Employee data processing addendum Report an error

  “All employees have signed a Data Processing Addendum to the contract of employment and have provided a clean criminal record as part of our hiring process.”

• Least privilege Report an error

  “Restricted access to Personal Data - We follow the principle of least privilege in our business operations.”

• Entity address Report an error

  “SimplyBook.me Ltd, at Nafpliou 28, Medical Court, Floor 4, Flat/Office 401, 3025, Limassol, Cyprus. HE387490, VAT No.: 10387490F.”

• Parent group Report an error

  “SimplyBook.me is part of team.blue.”

• ISO 27001 Report an error

  “ISO 27001 certification”

• Whistleblower contact Report an error

  “OR legal@simplybook.me for legal queries, including reporting suspected misconduct, in line with the EU Whistleblower Directive.”

• GDPR implementation date Report an error

  “The GDPR was implemented on 25.05.2018”

• Backups minimize personal data Report an error

  “Back up procedures have been changed to minimize personal information storage for deleted systems.”

• Supplier dpas Report an error

  “Our contractual relationships with our suppliers are assessed and additional documentation for privacy and data protection is concluded - the Data Processing Agreements/Addendums.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Independent Consultant Team, staff & location scheduling
• The Independent Consultant Reminders, payments & no-show protection
• The Independent Consultant European sovereignty
• The Data Protection Officer Reminders, payments & no-show protection
• The Data Protection Officer Integrations, API & data export
• The Data Protection Officer European sovereignty
• The Practice Owner Team, staff & location scheduling
• The Practice Owner Reminders, payments & no-show protection
• The Practice Owner European sovereignty
• The Sales Team Lead Team, staff & location scheduling
• The Sales Team Lead Reminders, payments & no-show protection
• The Salon Owner Team, staff & location scheduling
• The Salon Owner Reminders, payments & no-show protection
• The Salon Owner European sovereignty
• The Skeptic Team, staff & location scheduling
• The Skeptic Reminders, payments & no-show protection
• The Skeptic Integrations, API & data export