GDPR
The GDPR is the European Union's General Data Protection Regulation. It governs the processing of personal data and people's rights. Whether it applies, and what requirements apply to a particular process, depends on the activities and circumstances.
On this page
Source content checked . English translation published 2026-10-27.
In business automation
In an automated process, personal data may pass between a form, CRM, AI provider, and logs. Mapping the data flow helps clarify processing purposes, permissions, and deletion, alongside checking applicability and obligations in the specific case.
Examples
These examples illustrate a possible workflow. Adapt the connections and rules to your own systems.
Business process example
A business documents which inquiry fields are sent to each service, minimizes unnecessary data, and defines how to locate records when handling a request for deletion or access.
Relevant tools
- HubSpot
- An example of a system that holds customers' personal data. Its settings and integrations should align with the business's policies.
What to check
- A subscription to a tool that claims compliance does not make every use of it compliant. Assess your process and agreements as needed.