Enterprise Security Assessment > Data and Asset Security > Privacy

For client scoped data, is personal information provided to the organization directly by the client?

book reader icon
1 Minute
11/12/2024
facebook logo gray
linkedin logo gray
mail logo gray

Yes. All Personal Information, whether for client scoped data or not, is directly provided by QR Planet's clients.

The collection, useage, processing and retention of such data happens in full complience with the GDPR and is reviewed and supervised by our Data Protection Officers (done by management).

Last update 5 days ago

Is your service GDPR and CCPA compliant?

Yes, our platform is 100% GDPR & CCPA compliant. You can find out more on our GDPR page.

Is there a policy that defines the requirements for remote access from external networks to networks containing Scoped Systems and Data?

QR Planet's remote access policy includes Multi-Factor Authentication, VPN Access, complex and encrypted passwords, and the monitoring of remote access.

Are there documented policies in place to ensure that processing client scoped data is limited, and in compliance with applicable law?

QR Planet is fully GDPR complient. Access, transmission, processing, disclosure, and retention of client scoped data is in compliance with applicable law.

Is client scoped data aggregated, appended, or modeled using data analytics?

No. QR Planet does not use data analytics for such purposes.

Are policies and procedures in place to address third party privacy obligations including limitations on disclosure and use of client Scoped Data?

Data processing agreements defining scope, purpose and limitatios of data processing activities are established with third parties.