All Categories > Enterprise Security Assessment > Data and Asset Security > Privacy

Privacy

Questions about privacy and data protection.

Do you handle client scoped data that can be classfied as personally identifiable financial information under the Gramm-Leach-Bliley Act (GBLA)?

No. QR Planet renders no financial services at all, especially such requiring us to fall under the rules of the GBLA.

Last update 2 weeks ago

Do you have a documented Records Retention Policy that ensures Personal Information to be retained for no longer than necessary?

QR Planet is fully GDPR complient and uses a records retention policy that doesn't allow for Personal Information to be retained longer than necessary.

Last update 2 weeks ago

Do you have documented policies in place to ensure that processing client scoped data is limited, and in compliance with applicable law?

QR Planet is fully GDPR complient. Access, transmission, processing, disclosure, and retention of client scoped data is in compliance with applicable law.

Last update 2 weeks ago

Do you have documented policies in place, limiting the Personal Information collected and its use to the necessary minimum?

QR Planet is fully GDPR complient and has implemented a data protection policy that enforces all necessary collection limitations for Personal Information.

Last update 2 weeks ago

For client scoped data, is personal information provided to the organization directly by the client?

Personal Information is provided directly by our clients. The collection, useage, processing and retention of such data happens in full complience with the GDPR

Last update 1 month ago

Do you collect personal information directly from an individual on behalf of the client?

Yes, in full compliance with the GDPR (https://qrplanet.com/gdpr), also see https://qrplanet.com/privacy.

Last update 2 weeks ago

Do you have a Privacy Policy regulating the protection of information handled on behalf of clients?

The protection of all information collected, transmitted, processed, disclosed, or maintained by QR Planet on behalf of clients is ensured.

Last update 2 weeks ago

Do you maintain documentation of data flows and data inventories for client scoped data?

This practice aligns with data governance, security, and privacy standards QR Planet adheres to, especially when handling sensitive or classified client data.

Last update 2 weeks ago

Do you employ a designated organizational structure or function responsible for data privacy or data protection as it relates to client scoped data?

No. As a small LLC, all data privacy and protection issues are continuously monitored by management during the course of daily business.

Last update 2 weeks ago

Does QR Planet handle any client scoped data that can be classified as personal information or data of individuals?

The handling of client scoped data that includes any such classification happens in full compliance with the GDPR. This is reviewed by Data Protection Officers.

Last update 2 weeks ago

Do you have a process for ensuring the disposal of temporary files that have been created containing Personally Identifiable Information?

QR Planet is fully GDPR complient and ensures the secure and timely disposal of all temporary files containing Personally Identifiable Information.

Last update 2 weeks ago

Do you use data analytics to aggregate, append or model client scoped data?

No. QR Planet is fully GDPR complient (https://qrplanet.com/gdpr). We do not use data analytics on client scoped data.

Last update 2 weeks ago

Do you inform individuals about their rights concerning their personal data which is maintained by QR Planet?

Yes. Our customers are informed about their rights to access, review, update, correct and limit disclosure or transmission of their personal information stored.

Last update 2 weeks ago

Do you have policies in place to address third party privacy obligations including limitations on disclosure and use of client Scoped Data?

Yes. Data processing agreements defining scope, purpose and limitatios of data processing activities are established with third parties.

Last update 1 week ago

Do fourth parties handle client scoped data in any way?

Yes. If necessary, subcontractors, sub-processors or sub-service organizations may have access to, receive of process client scoped data.

Last update 2 weeks ago

Do you employ a documented data protection program with safeguards for the protection of client scoped data?

QR Planet is fully GDPR complient. Client scoped data is protected by documented administrative, technical, physical, and environmental safeguards.

Last update 2 weeks ago

Do you have a data privacy or data protection function?

QR Planet is fully GDPR complient. Our management takes over the role as DPOs and maintains compliance, enforcement and monitoring procedures.

Last update 2 weeks ago

Do you have policies and processes in place to address privacy inquiries, complaints and disputes?

As a small LLC, our management takes over the role as DPOs (Data Protection Officers) and handles all privacy complaints and disputes.

Last update 2 weeks ago

Did you register as a telemarketer under any state or national regulation?

No. QR Planet does not employ telemarketing in any way, thus we are not registered as telemarketer with any gouvernmental agency.

Last update 5 days ago