Place - GDPR - Managing consents

The Manage Consents feature gives data subjects—such as employees, event participants, external partners, or models—greater visibility and control over the assets and personal data held on them within the Papirfly platform.

What is it?

Manage Consents provides a self-service dashboard where data subjects can:

• View a full list of consents they’ve previously given
• See all assets linked to those consents (e.g. images, videos)
• Remove consent for future use
• Request deletion of individual assets
• Report concerns with how an asset is being used

This supports GDPR and similar regulations by enabling transparent data handling and subject rights management.

Why is it important?

This feature helps organizations uphold key data protection principles, including:

• Right to be informed – by showing users how their data is being used
• Right to withdraw consent – at any time
• Right to erasure (right to be forgotten) – through deletion requests for individual assets
• Right to object or raise concerns – via a direct reporting mechanism

For businesses operating in multiple markets or handling large volumes of media assets, this tool simplifies compliance while reducing manual handling of consent and deletion requests.

How does it work?

Access

Data subjects access the Manage Consents dashboard via a secure, time-limited login. Administrators can generate and send access credentials directly from the GDPR Manager in Place

When triggered, two separate emails are sent to the data subject:

• One containing a secure link to the dashboard
• One containing a temporary password, valid for 48 hours

This two-step process enhances security by ensuring that access details are delivered separately and expire after a short window.

Dashboard overview

The user sees a list of all active consents and the assets associated with each one, including thumbnails and metadata where applicable.

Available actions

Users can take the following actions directly from the dashboard:
    •    Remove consent – withdraw permission for ongoing use
    •    Request deletion – flag an individual asset for removal
    •    Report an issue – notify the organisation of a concern or misuse

Requests are sent to the appropriate teams for review.