Alle Testsieger-Siegel und weitere Auszeichnungen

Geschenke & Werbeartikel günstig online bestellen

Verantwortungsvoll handeln - finanzieller Klimabeitrag

Paketzustellung in Deutschland und ganz Europa

Kostenloser Versand!
Same Day Produktion!
2 Millionen zufriedene Kunden!
Tiefpreis-Garantie!

Technical and organisational measures

according to Art. 32 Sec. 1 GDPR for Controller (Art. 30 Sec. 1 lit. g) and processor (Art. 30 Sec. 2 lit. d)

1. Pseudonymisation

The goal of pseudonymisation is to make it impossible to associate personal identifiable information (PII) to any specific person without access to additional information. The supplementary information must be stored seperately and is subject to technical and organisational measures.

Authorisation for de-pseudonymisation is restricted to special privileged user accounts
Run the pseudonymisation procedure as soon as possible, especially in case of statistical data

2. Encryption

The goal of encryption is to convert personal identifiable information into a non-readable format, using specific procedures and algorithms.

Encrypting PII in transit, by utilising appropriate transmitting mechanisms and protocols (i.e. HTTPS, SFTP, ...)
Encrypting at rest, when stored on storage mediums
Integrated state of the art encryption procedure, when storing relevant data in a database

3. Ensuring confidentiality

Electronic access control
Key management and designation of authorised personnel
Visitor management, documented arrival and departure times, always accompanied by internal employees
Motion detector and CCTV in areas with high security requirements
Alarm system
Intrusion detection system
Door safeguards
User access authentication and authorisation in all systems
User authentication with minimal standards for passwords
Password policy enforced by GPO
Password management tool for all employees
Application-based Firewall
Intrusion Detection und Intrusion Prevention
Antivirus with daily update and integrity check on endpoints
Patch management with regular updates of threatened software components
VPN secured remote access
Two factor authentication
Regular training for employees regarding IT-security and data protection topics

4. Ensuring integrity

Audit logs for online system access
User access authentication and authorisation in all systems
Least privilege principle (reviewed annually)
Storage of storage media in security zone, for example fire secured security lockers
Encryption in transit

5. Ensuring availability

Backup with recurring recovery training
UPS in all server rooms
Redundant climate control in all server rooms
Environment monitoring in all server rooms (leakage, humidity, temperature, smoke)
Alarm system monitoring by professional security services