LimaCorporate is a global producer of medical devices that can offer reconstructive and tailor-made orthopedic solutions to surgeons, helping them to improve the quality of life of their patients. Based in Italy, LimaCorporate is committed to developing innovative products and procedures that allow surgeons to select the ideal solution for each individual patient. The LimaCorporate product range includes primary or revision implants for large joints, and complete solutions for extremities.

With over 900 employees and two manufacturing plants worldwide, LimaCorporate sells its products through a network of direct subsidiaries and distributors in over 42 countries. Operating in a highly regulated sector, LimaCorporate has always been attentive to the protection of personal data, often dealing with medical data.

Data Protection Officer at LimaCorporate, Elena Bianchi said that the advent of the GDPR did not take the company by surprise, and they were soon able to launch a program for compliance with the new requirements of European law.

“While not working directly with the recipients of our products, as part of the services made available to health professionals, we often come into contact with sensitive data concerning people’s health. We must therefore take into account the now numerous national regulations that protect personal data and in particular health data,” said Elena.

“The management of LimaCorporate favors agile work and collaboration between people, maintaining the highest levels of quality. Thanks to the flexibility of the OneTrust tool, I developed the Privacy Compliance program through teamwork and by inserting the procedures in the corporate quality management framework,” said Elena.

Choosing OneTrust for simplicity, functionality, and compliance

“From the very beginning, I realized that an Excel sheet could not be the solution, so I looked for an application that was right for us: web app, multilingual, multi-jurisdiction, multicompany, GDPR compliant, easy to use, with the possibility of running a free trial in a real environment and, of course, at an affordable price,” said Elena.

At the time (in 2018 there was nothing but talk of the GDPR), LimaCorporate found many companies offering substantial programs, but no other companies that matched their needs as closely as OneTrust. LimaCorporate chose OneTrust in part for the functionality of the Data mapping module, which formed a key part of their compliance plan.

The initial intention was to be able to easily manage the Register of Processing Activities, in line with article 30 of the GDPR, for the whole group (Head Quarters and 23 branches) taking into account information flows and the different jurisdictions in which the various non-European branches are located.

“The method of collecting information through customizable questionnaires makes it an easy tool to use even by those who are not familiar with the legislation and requires very little time to be completed, greatly facilitating the task of drafting the treatment register, especially in this period in which a lot of work is done from home,” said Elena.

Elena and the rest of the team found it very simple to integrate the management of cookies, and LimaCorporate are planning to continue with the automation of requests from interested parties.

“The incredible ability of the product to expand the functionalities available to users really surprised and positively impressed me. I have never been left behind with respect to possibilities and innovations of the software, they are released into production with practically no down-time and no effort on our part,” said Elena.

“The Data Discovery functionality will be our next milestone which I believe will make it easier for the information systems team as well,” said Elena.

Looking back, LimaCorporate are satisfied with their choice, in a very short time OneTrust has become a top company in the sector and in the era of forced smart working, LimaCorporate already had a tool perfectly adaptable to the situation.