Case study - a delivery company

Context

As part of its digital transformation, a French company specialized in parcel transport and delivery, managing 5 entities, was facing difficulties in involving all its subsidiaries in data protection activities. In particular, the drafting, control, and compliance of data processing were done solely by the DPO.

The increasing number of data subject requests placed a heavy burden on the compliance team, and the lack of budget prevented them from allocating time to ensure compliance of different data processing activities.

Objectives

The company wanted a simple tool to guide the business units, flexible enough to address its multi-entity management needs, as well as collaborative for increased efficiency and oversight. After conducting a benchmark, Dastra was identified as the most suitable solution for managing the register and automating the collection of data subject requests.

Results

After 8 months of implementation:

• 70 data processing activities were mapped and reviewed, with 76% carried out directly by 22 GDPR coordinators.
• Nearly 270 compliance tasks were completed during the same period.
• 300 requests were automatically collected through the data subject request widget.
• 12 product enhancements were implemented by Dastra based on client requests.