GDPR compliance for (indirect) victim support communication
MenAsWell
- Article
- Technical Web Analytics
- Data collection compliance
- Datahub



MenAsWell provides help and support to male survivors of sexual violence, striving to bridge the gap in support for men post-trauma, while increasing awareness and visibility of male survivors.
MenAsWell sought a comprehensive GDPR audit and posted a call for support on Nieuwe Gevers. The Datahub saw this call and was enthusiastic to help. This audit included securely configuring Google Cloud and ZorgMail to ensure privacy-friendly communication with victims and clients. MenAsWell intended to use ZorgMail to secure its communication, while Google Cloud was selected for setting up, managing, and securing client files. Additionally, they requested a website cookie and consent audit to verify proper setup.
Approach
We conducted a Data Protection Impact Assessment (DPIA) focusing on the migration to ZorgMail and Google Cloud. This assessment allowed us to identify risks and provide recommendations for enhancing privacy and security within the communication infrastructure. Our recommendations covered technical actions (controls for tool implementation) and organizational recommendations, such as team training, process development, and creating a manual.
Some technical recommendations were implemented directly in Google Cloud, including:
- Determining the optimal data storage location
- Communicating with the relevant data protection authority
- Implementing a cloud-processing addendum
- Disabling automatic AI functionalities
For the organisational recommendations, we compiled an advisory report.
Finally, we provided advice on configuring the cookie banner and implemented this directly in their consent management platform (CMP).
Result
We configured ZorgMail and Google Cloud to be as secure and privacy-friendly as possible, with essential controls in place. MenAsWell is now well-informed about potential risks and equipped to implement appropriate technical and organisational controls.
Their cookie banner has been significantly improved and updated to meet the latest guidelines. As a result, MenAsWell's core values, particularly the importance of consent, are more accurately reflected in their cookie and consent policies. Their clients can now share their stories or seek help in an even safer environment.
MenAsWell plans to implement the recommended organisational measures. With greater assurance of safeguarding the privacy and security of their target group, MenAsWell can confidently focus on their mission: supporting survivors and providing targeted and appropriate assistance.
Want to know more?
Stefan will be happy to talk to you about what we can do for you and your organisation as a data partner.
Commercial Manager Technical Web Analytics+31(0)20 308 43 90+31(0)6 33 65 99 17stefan.put@digital-power.com
Receive data insights, use cases and behind-the-scenes peeks once a month?
Sign up for our email list and stay 'up to data':
