A. Manual register
Manual register is held in a locked storage cabinet. Only the authorized people in the company can access the cabinet.
B. Data register
Communication devices, that are used to contact the supplier, read or process the personal data, have a password or a PIN enquiry or another means of restricting unauthorized users to access the data. They are connected only to known networks, that have a firewall enabled. The communication devices have a security software installed. The supplier register server is located in Finland in premises that fulfill the requirements set by Finnish Communications Regulatory Authority according to 48A/2003 concerning “Important premises”. It defines the demand for physical protection of communication network against fire, water and burglary. The network is also protected by a firewall. CRM, web and email server is also located in Finland. The server is protected by a firewall and the server lies in Level 2 segmented network. Only the authorized people can access these servers.
Most of the devices and the installed applications are manufactured and controlled outside the European Union (for example using updates or other applications).