If you use Clik Software, understanding these responsibilities helps you handle customer and employee information correctly and confidently.
Core Principles
The regulation is built on several key principles that guide how data should be managed. In practice, this means ensuring that your data processes are:
- Lawful, fair and transparent
- Purpose-limited – used only for clear, defined reasons
- Data-minimal – collect only what you genuinely need
- Accurate and up to date
- Stored no longer than necessary
- Secure and protected
- Accountable – you must be able to demonstrate compliance
Individual Rights
People have strong rights over their personal data, and you must be able to support these clearly and promptly. These rights include:
- Accessing the data you hold
- Requesting corrections or deletions
- Objecting to certain types of processing
- Receiving their data in a portable format
- Challenging automated decision-making
Controllers and Processors
Your role under UK GDPR depends on how you use Clik:
Data Controllers
If you decide why and how personal data is processed, you must:
- Have a lawful basis for processing
- Provide clear privacy information
- Maintain strong security measures
- Keep records of how data is used
- Report data breaches when necessary
- Use compliant contracts with any processors you work with
Data Processors
If you process data on behalf of another organisation, you must:
- Follow the controller’s instructions
- Maintain confidentiality and security
- Assist with compliance tasks such as data access requests
What Clik Customers Should Do
To stay compliant while using Clik:
- Map what personal data you store in Clik and why
- Check your lawful bases for processing (e.g., contract, consent, legitimate interest)
- Keep your privacy policies and procedures updated
- Set up a clear process for handling access and deletion requests
- Ensure your Clik system has appropriate access control and security settings
- Maintain documentation so you can demonstrate accountability
This post was first published in March 2018 and has been edited with updated information.