A. Manual register
Manual register is held in a locked storage cabinet. Only the authorized people in the company can access the cabinet.
B. Data register
Communication devices, that are used to contact the contact person, read or process the personal data, have a password or a PIN enquiry or another means of restricting unauthorized users to access the data. They are connected only to known networks, that have a firewall enabled. The communication devices have a security software installed. Part of the register is located in Finland in premises that fulfill the requirements set by Finnish Communications Regulatory Authority according to 48A/2003 concerning “Important premises”. It defines the demand for physical protection of communication network against fire, water and burglary. The network is also protected by a firewall. The other parts of register are also located in Finland. The server is protected by a firewall and the server lies in Level 2 segmented network. Only the authorized people can access these servers.
Most of the devices and the installed applications are manufactured and controlled outside the European Union. For example mobiles, that are used to contact sponsorship contacts, have applications, which use servers outside the Europe and which may read address book, pictures and other information in the phone.