Data Protection

All necessary measures within GDPR are standard built into Klubs. Some of these measures:

Consent or explicit and informed consent for all stored data
Protection of member data in a secure environment
Security of data to the best of our ability against loss, theft, unauthorized access and modification by non-users
Outsourcing to third parties (including hosting, transactional mailing, IT infrastructure) to professional parties with excellent references and guarantees regarding data protection
Encrypted storage of passwords, of course not accessible by club administrators
Limiting access to sensitive information to authorized persons
Clubs are audited annually by a Data Processing Officer
The possibility to remain anonymous within the association (personal data not in the membership list), anonymous registration for activities
Opt-out of all electronic mailings
Clear procedures (limitation of authorized persons) when uploading images
Forget-me procedure, partly dependent on the club manager
Ability to submit an inquiry request containing all data we have collected about a member.

A Long Read around GDPR and Clubs – Support Documentation .

Clubs use their own authentication module.
But also the possibility for SSO via Okta, possibly Google sign-on, ...

Klubs has its own Cloud set-up, at Combell, with the following security management:

At the Admin level, there are a number of data sets reserved for Admins only:

Privacy Statement
Customizable / Mandatory Consent
Registration
Configuring which fields in registration procedure
Profile - Internal Information
Member Since, Notes, Introduction by
Profile Additional Fields
(Indication - User Customizable?)
Activities
Indication: Show participants list? - Show guests on participant list?

At the User level, there are a number of data sets that the member can set: