Customer story with Mikkel from Ordrestyring

15. February 2021

Jacob Høedt Larsen

Industry

Software as a Service

No. of employees

30+

Challenge

Automating GDPR compliance and ISAE 3000 certification

Location

Copenhagen

Decentralized GDPR

The company Ordrestyring does not only handle the personal information of their own employees. More than 2,000 construction companies have also placed their data in the “craftsmen’s preferred case management system”. Therefore, GDPR is essential for the company. The managing partner, Mikkel Leffers Svendstrup has also decided that the company must have an ISAE 3000 declaration.

Ordrestyring helps craftsmen digitize their business and has within its 10 years optimized more than 2,000 construction companies throughout the Nordic region. 

Numerous electricians, plumbers, carpenters, masons, painters, locksmiths, sewage workers, landscapers and contractors put their trust in the company Ordrestyring. GDPR and information security have not been prioritized within these industries, Mikkel Leffers Svendstrup explains. As the market leader, he believes that Ordrestyring must recognize the severity of the problem. 

GDPR: A competitive advantage

“Our current company size underlines the gravity of the issue and proves our professionalism in tackling it. Not only are we the first within our industry to comply with the rules, but we also have proof of it. It is a manifestation that we have cracked the code, thus solidifying the value of our product,” he says.

Within the market for digitization of construction companies, Ordrestyring’s product is not sold at a low price. Mikkel Leffer’s Svendstrup’s customers emphasize the fact that they know that Ordrestyring will be in business in the future as well. Thus, the GDPR handling and the ISAE 3000 declaration become a competitive advantage.

Automation and decentralization

When Mikkel Leffers Svendstrup began the GDPR work, the goal was to automate the controls and outsource the handling to the individual departments. This would decrease the heavy, administrative burdens on the company. In this context Wired Relations became relevant for the company, as the system supports their needs.

“We can automate the control tasks. This makes the day-to-day operation of GDPR easier, and has enabled decentralization of the work across several departments,” says Mikkel Leffers Svendstrup.

Gaining control over personal data has also led to financial savings within Ordrestyring. As the company gained an overview of the IT systems being used, they were quickly able to identify 20 unnecessary suppliers. The overview also means that work with the ISAE statement will be less costly as the auditor’s work will be easier.

Wired_Relations

What is ISAE 3000?

ISAE 3000 is an auditor’s statement that assures data processors comply with the requirements of the GDPR the company has committed to in signed data processor agreements.

Wired Relations available for Ordrestyring customers

Ordrestyring.dk and Wired Relation’s collaboration enables Ordrestyring.dk’s customers to handle GDPR in Wired Relation’s systems.

“There are many small and medium-sized construction companies that have turned the blind eye on GDPR work. They do not comply, and thus they take a risk. The craftsmen may not be the primary target for the Danish Data Protection Agency, but the risk is there – especially if a customer complains,” Mikkel Leffers Svendstrup says.

Gilli Haraldsen from Wired Relations agrees.

“It must be relatively easy for a construction company to handle personal data. We have now made a product where they achieve an overview and are able to systemize the data once and for all,” he explains.

If you wish to be inspired for your GDPR work, you are welcome to participate in PrivacyBoozt, where we regularly host webinars and events around GDPR.

Jacob Høedt Larsen

Head of Communications hos Wired Relations

Du er måske også interesseret i

LOGSTOR: “Give it a go”

LOGSTOR: “Give it a go”

In the summer of 2017, Louise Heilskov was given the responsibility of implementing GDPR in LOGSTOR, a company in the...