Skip to content
Enclessa
Get started

Glossary · Compliance

DSGVO

All termsHow Enclessa secures data

DSGVO is the German name for the GDPR — Datenschutz-Grundverordnung — and refers to exactly the same Regulation (EU) 2016/679, not to a separate German law.

Open betaThe platform is being built in the open, so parts of it are not there yet, behaviour changes between releases, and no availability figure is committed while it is in beta. What is still being built.

Also called

Datenschutz-Grundverordnung

What DSGVO means

The two abbreviations cause real confusion in procurement, where a German questionnaire asking about DSGVO conformity and an English one asking about GDPR compliance are asking the identical question and sometimes receive different answers from the same vendor.

What is genuinely German, and separate, is the Bundesdatenschutzgesetz, the BDSG, which fills in the areas the regulation leaves to member states. The provisions most likely to surface in a software purchase are the threshold at which a data protection officer must be appointed and the specific rules on processing employee data, which matter for any system holding personnel records or working time.

A German seller is also subject to obligations that have nothing to do with data protection but appear on the same pages — the imprint duty under § 5 DDG, and the commercial and tax retention periods under § 257 HGB and § 147 AO, which can require records to be kept even where a data subject has asked for erasure.

How Enclessa uses it

Enclessa’s legal pages are the German set, because the seller is a German company: an imprint under § 5 DDG, a privacy notice under Articles 13 and 14, a data processing agreement under Article 28, and terms drafted to the German standard for business terms. Those pages are drafts pending review by counsel and are marked as such on the site.

Where DSGVO is specified

Related terms

GDPRThe GDPR is Regulation (EU) 2016/679, the European Union law that governs the processing of personal data and applies to any organisation processing the data of people in the EU, wherever that organisation is established.Read the entryData processing agreement (DPA)A data processing agreement is the contract required by Article 28 of the GDPR between a controller and a processor, setting out what the processor may do with personal data, on whose instructions, with what security, and what happens at the end.Read the entryData residencyData residency is the requirement that data be stored and processed within a named geographic territory, usually a country or an economic area such as the European Union.Read the entryRetention policyA retention policy is a rule stating how long a category of data is kept before it is deleted, applied automatically rather than left to somebody remembering.Read the entry

Read further

The security page explains how Enclessa protects data and which certifications it does not hold. The trust centre covers the processing agreement, the subprocessors and the residency position. The FAQ answers the questions buyers ask most often.

Encrypted collaboration, hosted in Europe.

Create a workspace in a couple of minutes. It is yours at your-team.enclessa.app, hosted in the European Union, with encrypted direct messages from the first one you send.

Create your workspaceSee pricing

Open beta. Free plan, no payment card to start.