Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject’s agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement.

Necessity for performance of contract

Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Task in the interest of public.

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Legitimate interest pursued by a controller

The legitimate interests of a controller, including those of a controller to which the personal data may be disclosed, or of a third party, may provide a legal basis for processing, provided that the interests or the fundamental rights and freedoms of the data subject are not overriding, taking into consideration the reasonable expectations of data subjects based on their relationship with the controller.

Vital interests of the Data Subject

Processing is necessary in order to protect the vital interests of the data subject or of another natural person.  The processing of personal data should also be regarded as lawful where it is necessary to protect an interest which is essential for the life of the data subject or that of another natural person. Processing of personal data based on the vital interest of another natural person should in principle take place only where the processing cannot be manifestly based on another legal basis.

Legal obligation

Processing is necessary for compliance with a legal obligation to which the controller is subject.

A real-time assessment of your compliance posture with actionable insights to improve your data protection capabilities.

  • An intelligent score shows your compliance posture against evolving regulations.
  • Recommended actions improve your data protection capabilities.
  • Streamlined workflow and audit-ready reports simplify compliance.

Data governance and protection of your sensitive data across devices and apps, both on-premises and in the cloud.

  • Identity & Access Management protects users’ identities and controls access to valuable resources based on user risk level.
  • Azure Information Protection automatically classifies and protects your sensitive data across cloud services and on-premises.
  • Threat Protection guards against advanced threats and helps you recover quickly when attacked.

Built in audit-ready tools that help you collaborate between teams and manage your processes.

  • Quickly find data associated with an individual in Office 365 to streamline data subject requests.
  • Microsoft Advanced Threat Analytics detect cybersecurity attacks fast and notify of a breach within 72 hours.

Why Choose Us

  • More than 10 years of experience in Dynamics 365 Customer Engagement

  • We have the skilled personnel, process knowledge, and Microsoft technology expertise to evaluate your GDPR readiness and help you on your path to become, and stay, compliant

  • We always use best practices, placing a strong emphasis on planning, which helps you avoid wasting time and money in implementing your Dynamics 365 CRM project

  • We are dedicated to providing the highest business value focusing solely on Dynamics 365 CRM

  • We always think Dynamics 365 CRM adoption is not only about the technology but also about the people using it! Training and support are two important elements in our projects.