Passa al contenuto principale

GDPR & Compliance

Data protection and regulatory compliance in Ever Gauzy.

GDPR Requirements​

RequirementGauzy Implementation
Right to accessEmployee data export
Right to erasureAccount deletion, data purge
Data minimizationConfigurable data collection
Consent managementScreenshot consent, tracking
Data portabilityJSON/CSV export
Breach notificationAudit logging, alerts

Data Subject Rights​

Right to Access (Article 15)​

Employees can export their data:

  1. Go to Profile β†’ Privacy β†’ Export My Data
  2. Downloads JSON with all personal data

Right to Erasure (Article 17)​

Admin can delete employee data:

  1. Go to Employees β†’ select employee
  2. Click Delete β†’ Permanently Delete All Data
  3. Removes: user account, time logs, screenshots, activities

Data Collection Settings​

Data TypeDefaultConfigurable
ScreenshotsEnabledβœ… Per org
Activity levelsEnabledβœ… Per org
App/URL trackingEnabledβœ… Per org
Mouse/keyboardEnabledβœ… Per org
GPS locationDisabledβœ… Per org

Data Retention​

Configure automatic data cleanup:

# Auto-delete screenshots older than N days
SCREENSHOT_RETENTION_DAYS=90

# Auto-delete activity logs older than N days
ACTIVITY_RETENTION_DAYS=365

Audit Trail​

All data access and modifications are logged. See Audit Logging.