GDPR

Edited 28-05-2024 15:32

According to the General Data Protection Regulation (GDPR), data protection must be considered from the start in the design and development of an IT solution, and standard settings must ensure that only the personal data necessary in relation to the purpose of the processing is processed.

Tangora solutions support all relevant legal requirements as well as guidelines and recommendations from the Danish Data Protection Authority (Datatilsynet) and ensure a high level of data security via technical and organizational measures such as

• Independent ISAE 3000 audit carried out every year document Tangora's GDPR compliance

• Professionel hosting with the ISO/IEC 27001:2022-certified operations specialist IT Relation on servers in Denmark

• High level of data security via continuous security updates, 24/7 monitoring, daily backup and established procedures

• Detailed management of users' access to personal data - i.e. access rights can be controlled in relation to e.g. job function, employment period, location or other

• Possibility of encryption of content in fields with confidential and/or sensitive personal data (special categories of personal data)

• Automatic log

• 2-factor login backend

• 2-factor login frontend, possibly using authentication app, SMS, email or MitID authentication

• Configurable, automated anonymization or deletion of personal data

• SSL encryption of pages

• TLS encryption of emails sent from the solution

• Configurable consent functionality

• Configurable cookie banner

There is no transfer to third countries on the part of Tangora or sub-processors.

Tangora's project model ensures, via a professional, structured and systematic approach, that early in the delivery process, account is taken of covering legal requirements, risk assessment, possibly impact analysis and implementation of data protection through design and default settings (cf. the above-mentioned privacy-enhancing technologies) and that appropriate technical and organizational security measures are implemented with respect to compliance with GDPR and other relevant legislation.

If you have questions about GDPR, Tangora's EXIN-certified GDPR consultant will be happy to help with advice and guidance.