Enterprise Security Assessment > Data and Asset Security > Privacy

Do you handle client scoped data that can be classfied as personally identifiable financial information under the Gramm-Leach-Bliley Act (GBLA)?

book reader icon
1 Minute
11/12/2024
facebook logo gray
linkedin logo gray
mail logo gray

No. QR Planet renders no financial services at all, especially such requiring us to fall under the rules of the GBLA.

Last update 2 weeks ago

Do you maintain documentation of data flows and data inventories for client scoped data?

This practice aligns with data governance, security, and privacy standards QR Planet adheres to, especially when handling sensitive or classified client data.

For client scoped data, is personal information provided to the organization directly by the client?

Personal Information is provided directly by our clients. The collection, useage, processing and retention of such data happens in full complience with the GDPR

Do you have documented policies in place to ensure that processing client scoped data is limited, and in compliance with applicable law?

QR Planet is fully GDPR complient. Access, transmission, processing, disclosure, and retention of client scoped data is in compliance with applicable law.

Do you use data analytics to aggregate, append or model client scoped data?

No. QR Planet is fully GDPR complient (https://qrplanet.com/gdpr). We do not use data analytics on client scoped data.

Do you have policies in place to address third party privacy obligations including limitations on disclosure and use of client Scoped Data?

Yes. Data processing agreements defining scope, purpose and limitatios of data processing activities are established with third parties.