The task of the sales and customer service department is to achieve sales goals, which includes building and maintaining customer relationships, optimizing sales processes, and promoting company growth. In this context, the management of customer data is critically important, and it must take into account requirements for the protection of personal data to protect customer privacy and ensure data security. Let's look at the specifics of data processing in the sales department from the perspective of the requirements for personal data protection. Data acquisition is the first step in managing customer information. The sales department must ensure that data is obtained fairly and legally, obtaining customer consent where necessary. For example: for a customer's card acquisition, the customer needs to fill out a form, or when filing a complaint, the customer indicates their personal data or in similar cases. The next step is data entry into CRM systems. At this stage, it is important to ensure that data processing occurs securely, protecting it from illegal access or loss. For example, to prevent others from maliciously using the customer's benefits when making purchases or arranging volume bonuses. Customer data storage is the process of accumulating information about customers. This information may include personal data, purchase history, communication data, and other customer-related information. Data verification helps ensure that the sales department has accurate and up-to-date information, which is important for effective sales and customer service. However, the storage and viewing process of data must ensure that only authorized persons have access to customer data for specific tasks and that this access is controlled and documented. For example, to work with certain types of data, the employee must have appropriate access, which protects against unauthorized data access. Regular updating and addition of data are crucial to improving customer profiles and identifying sales opportunities while always adhering to data protection principles. For example, the customer's surname or address has changed. Data duplication must be conducted following the principle of data minimization - for what purpose and to what extent reproduction is necessary and with appropriate protection for duplicates. For example, data duplication may involve copying and transferring customer data between various systems or databases. This process must be conducted following data security requirements to prevent unauthorized access or data loss. Transferring data to other departments or external partners must ensure that data is protected during transit and that the recipients follow appropriate data protection standards. It must be ensured that the transmission is not automatically duplicated to individuals who do not need it. Data transfer always occurs from a work email to another work email. Meanwhile, data deletion or destruction must comply with data protection standards and customer requests, ensuring that personal data is not stored longer than absolutely necessary. Data deletion must occur following the company policy and legal regulations. This may include deleting data from all systems and databases and physically destroying data carriers such as CDs or USB drives, for example. If data is stored in physical format, such as paper documents, they must be securely destroyed using a shredder, or in certain cases, by blacking out personal data with a black marker and finely shredding. It must be remembered that managing customer data requires adhering to best practices for protecting personal data by developing and implementing clear policies and procedures so that all employees understand their responsibilities and actions. Thank you for your attention, and do not forget that this knowledge must be regularly updated. Goodbye!