Legal & GDPR

How does GDPR affect our use of Skovik?

As an employer you have responsibility for your employees’ personal data. You must ensure that companies processing personal data on your behalf, such as payroll or expense management systems, adhere to GDPR rules on security and privacy.

A few examples of GDPR requirements:

• Personal data must be protected by adequate security and appropriate organizational measures.
• Systems must be resilient to failure and services should backup important data.
• People with access to personal data, for example a database administrator, must be bound by confidentiality agreements.

At Skovik we've always worked hard to keep data you store with us secure. We think it's excellent that these requirements are enshrined in law.

Can you sign our DPA instead?

With thousands of customers, we cannot sign individual data processing addendums. The addendum we provide is tailored to the services we provide.

As a customer you have numerous suppliers, from fleet management to recruiting systems and expense management. Since every supplier is unique, it's reasonable that each provide a DPA adapted to their service. Furthermore, with a standardized agreement it is easier for us to guarantee compliance, which is the overarching purpose of the data processing addendum.