A comprehensive Laravel-based system for managing companies, employees, customers, and suppliers with full GDPR compliance and data protection features.
- Right to be Forgotten: Complete data deletion upon request
- Right to Data Portability: Export personal data in multiple formats (JSON, CSV, XML)
- Right to Access: View all personal data and processing activities
- Right to Rectification: Update and correct personal information
- Right to Restrict Processing: Limit data processing activities
- Right to Object: Object to data processing
- Granular Consent: Separate consent for different processing purposes
- Consent History: Complete audit trail of consent changes
- Consent Withdrawal: Easy consent withdrawal process
- Consent Expiry: Automatic consent expiration tracking
- Consent Evidence: Document consent with screenshots, documents, or recordings
- Processing Register: Comprehensive record of all data processing activities
- Legal Basis Tracking: Document legal basis for each processing activity
- Risk Assessment: Risk level assessment for processing activities
- Data Protection Impact Assessment (DPIA): Support for DPIA requirements
- Third Country Transfers: Track international data transfers
- Employers: Companies that employ staff
- Customers: Companies that purchase products/services
- Suppliers: Companies that provide products/services
- Partners: Strategic business partners
- Legal and trading names
- Registration and VAT numbers
- Complete address information
- Contact details and website
- Industry classification and company size
- GDPR compliance information
- Personal information (name, email, phone)
- Employment details (position, department, hire date)
- Salary and employment type
- Emergency contact information
- GDPR consent tracking
- Full-time
- Part-time
- Contract
- Temporary
- Personal/business information
- Contact preferences
- Purchase history
- Customer status tracking
- GDPR consent management
- Individual customers
- Business customers
- Company information
- Contact person details
- Supply categories and status
- Financial information
- GDPR compliance tracking
- Primary suppliers
- Secondary suppliers
- Emergency suppliers
companies- Company information and GDPR complianceemployees- Employee records with consent trackingcustomers- Customer records with privacy preferencessuppliers- Supplier records with compliance datausers- User accounts with role-based access
data_processing_activities- Processing activity registerconsent_records- Consent history and evidence
- PHP 8.2 or higher
- Composer
- MySQL/PostgreSQL
- Laravel 12.x
-
Clone the repository
git clone https://github.com/Meo-ICAR/privacycall.git cd privacycall -
Install dependencies
composer install npm install
-
Environment configuration
cp .env.example .env php artisan key:generate
-
Database configuration Update your
.envfile with database credentials:DB_CONNECTION=mysql DB_HOST=127.0.0.1 DB_PORT=3306 DB_DATABASE=privacycall DB_USERNAME=your_username DB_PASSWORD=your_password
-
Run migrations
php artisan migrate
-
Start the development server
php artisan serve
GET /api/v1/companies - List companies
POST /api/v1/companies - Create company
GET /api/v1/companies/{id} - Get company details
PUT /api/v1/companies/{id} - Update company
DELETE /api/v1/companies/{id} - Delete company
GET /api/v1/companies/{id}/gdpr-status - Get GDPR status
POST /api/v1/gdpr/right-to-be-forgotten - Request data deletion
POST /api/v1/gdpr/data-portability - Request data export
POST /api/v1/gdpr/export-data - Export data in format
GET /api/v1/gdpr/data-processing-activities - Get processing activities
GET /api/v1/gdpr/consent-history - Get consent history
- Encryption: Sensitive data encryption at rest
- Access Control: Role-based access control
- Audit Logging: Complete audit trail of data access
- Data Minimization: Only collect necessary data
- Purpose Limitation: Clear processing purposes
- Default Privacy: Privacy-friendly default settings
- Privacy Settings: Granular privacy controls
- Data Retention: Automatic data retention policies
- Data Anonymization: Support for data anonymization
The system includes comprehensive GDPR compliance monitoring:
- Consent validity status
- Data retention compliance
- Processing activity tracking
- Data subject rights requests
- Breach notification tracking
- GDPR compliance reports
- Data processing activity reports
- Consent management reports
- Data subject rights reports
php artisan testphp artisan test --filter=GdprTest- Complete API documentation available at
/api/documentation - OpenAPI/Swagger specification
- Request/response examples
- GDPR compliance guide
- Data processing procedures
- Consent management procedures
- Data subject rights procedures
- Fork the repository
- Create a feature branch
- Make your changes
- Add tests for new functionality
- Ensure GDPR compliance
- Submit a pull request
This project is licensed under the MIT License - see the LICENSE file for details.
For support and questions:
- Create an issue on GitHub
- Contact the development team
- Check the documentation
- Initial GDPR-compliant company management system
- Complete data subject rights implementation
- Consent management system
- Data processing activity tracking
- API endpoints for all major functions
This system is designed to help organizations comply with:
- GDPR (General Data Protection Regulation)
- CCPA (California Consumer Privacy Act)
- LGPD (Brazilian General Data Protection Law)
- Other international privacy laws
This software is provided as-is for educational and development purposes. Organizations should:
- Conduct their own legal review
- Implement appropriate security measures
- Train staff on GDPR requirements
- Regularly audit compliance
- Consult with legal professionals
Built with ❤️ for privacy and data protection