News

Promata informs

It’s sealed:We are "trained in data protection in 2024!

15.10.2024

In collaboration with our external data protection partner, exkulpa GmbH, all employees of Promata receive regular training on data protection. And it really is all employees: from our IT specialists to the marketing and seminar/event department, to HR – and, of course, the management team as well!!

These training sessions are the foundation that ensures we all know what rights and obligations we have when handling personal data under the GDPR. But why exactly are these trainings, and therefore data protection, so important to us?

While data protection is important in private life to safeguard personal information from misuse and unwanted disclosure, it is even more crucial in companies. This is due to the large amount of sensitive data that companies like Promata process daily and the potentially serious consequences of a data protection breach. We are subject to strict data protection laws such as the GDPR, which impose strict rules on how we handle personal data.

For us as a company, data protection is not just a legal obligation but also a matter of trust. Customers and suppliers know that their data is handled safely and responsibly at Promata, and that they can trust us with their information in good conscience. That is why we invest in protecting our partners’ data and ensure that it meets GDPR requirements. This includes regular training for Promata employees, the implementation of technical security measures, and the development and execution of a comprehensive data protection plan.

What does a data protection training session look like?

The exkulpa training sessions are offered in an online format, allowing each employee to participate at their own pace and on their own schedule, either in the office or from home, using their own PC or laptop. The training consists of several chapters with intermediate and final tests (upon passing, a certificate is awarded).

To give you an idea of the content, we’ve put together a small test for you to try out. The answers are provided at the end. As we often find ourselves, there’s a lot you can take away from the training for your own personal data protection. Enjoy! 😊

 

Quiz: Test your knowledge of data protection

 

1. What is meant by data protection?

A) Protecting hardware from physical damage

B) Protecting personal data from unauthorized access and misuse

C) Ensuring that software has no errors

D) Regulating internet access

 

2. Which regulation governs data protection in the European Union?

A) General Data Protection Directive (ADR)

B) European Data Protection Regulation (EDB)

C) Regulation on the Protection of Digital Data (VSDD)

D) General Data Protection Regulation (GDPR)

 

3. What is an important measure for protecting your data?

A) Regularly changing your social media profiles

B) Using two-factor authentication and data encryption

C) Using the same passwords for all accounts for easier management

D) Turning off the computer after each use

 

4. Why is data protection important for companies?

A) To avoid fines from the EU and build customer trust

B) To make the company’s website faster

C) To increase employee productivity

D) To gain competitive advantages by selling customer data

 

5. Which role is often responsible for ensuring compliance with data protection regulations in companies?

A) IT-Support

B) Data Protection Officer

C) Human Resources

D) Marketing Department

 

6. What is a key obligation of a company under the GDPR when handling personal data?

A) Storing data for a maximum of 10 years

B) Regularly sharing customer data with third parties

C) Processing personal data only with the explicit consent of the individual concerned

D) Processing data exclusively on paper

 

7. Which of these scenarios could represent a data protection breach in a company?

A) An employee sends an email with sensitive customer data to the wrong person

B) A customer requests a copy of an invoice

C) An employee gets a pay raise

D) A company expands its product range

 

8. What is a crucial measure for controlling access to personal data within a company?

A) Providing open Wi-Fi for all employees

B) Using role-based and permission-based access controls

C) Storing data on a shared network drive without restrictions

D) Giving employees access to all company data

 

9. What should a company do if a data breach occurs?

A) Wait until a customer complains

B) Inform the supervisory authority immediately, but no later than within 72 hours

C) Delete the affected data immediately and ignore the incident

D) Discuss the incident internally without involving external parties

 

10. Which of the following statements is correct regarding data processors?

A) A data processor is not liable for data protection breaches that occur while acting on behalf of a company

B) Data processors are allowed to use the data for their own purposes

C) A company is obligated to carefully select data processors and ensure compliance with data protection regulations contractually

D) Data processors must always retain the data after completing their work

 

 

Answers: 1b, 2d, 3b, 4a, 5b, 6c, 7a, 8b, 9b, 10c