We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards
🔐
Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
🛡️
Access Controls
Multi-factor authentication and role-based access controls
🔍
Monitoring
24/7 security monitoring and intrusion detection systems
💾
Backups
Encrypted, geographically distributed backup systems
Organizational Measures
👥
Staff Training
Regular privacy and security training for all personnel
📋
Data Processing Agreements
All third parties bound by strict GDPR-compliant contracts
🔄
Regular Audits
Annual security audits and penetration testing
📊
Incident Response
Comprehensive data breach response and notification procedures
Security Certifications & Compliance
🏛️
ISO 27001
Information Security Management System certification
💳
PCI DSS Level 1
Payment Card Industry Data Security Standard compliance
🛡️
SOC 2 Type II
System and Organization Controls for security and availability
Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify the relevant supervisory authority within 72 hours
- Inform affected individuals without undue delay
- Provide clear information about the nature of the breach
- Explain the measures taken to address the breach
- Offer guidance on steps you can take to protect yourself