Security and data protection
Why is this topic so important for us?
…because we make the greatest possible efforts to protect our customers from data misuse. This is becoming increasingly important, especially in the context of digitization.
Data security is not the same as data protection
The ultimate goal of data security is to comprehensively protect data of any kind (both analog and digital) from threats – from loss to corruption to deletion of that data. This pursues the three fundamental protection goals of confidentiality, integrity and availability.
Data protection aims to protect personal data, i.e. all information relating to an identified or identifiable person, from unauthorized third-party access, loss or alteration.
Secure in our cloud
We provide access to various services based on our cloud infrastructure. We host these at an ISO 27001 certified data center provider. This ensures the permanent and smooth technical operation of the platform. We ensure compliance with numerous international standards and thus the security of all stored customer data. The European General Data Protection Regulation as well as the Federal Data Protection Act in its new version have regulated the processing of personal data since 2018. A distinction must be made between two use cases:
We as a processor
Personal data of third parties that is processed either in the WARIOS cloud infrastructure or during the execution of the integration process for on premise licenses is the sole responsibility of the customer. WTE Betriebsgesellschaft mbH (WTEB) acts here only on behalf of and on the instructions of the customer. WTEB therefore assumes the role of processor pursuant to Article 4 No. 8 DSGVO. We and our cloud customers must ensure that an order processing agreement (AVV) is in place in accordance with Art. 28 para. 3 DSGVO is concluded. In this agreement, both parties undertake to fulfill and implement the obligations set out therein accordingly. We will be happy to provide a sample contract of an AVV.
We as a processor of personal data of our customers
WTEB processes personal data of our customers contact persons within the framework of the contractual relationship. In doing so, we observe the requirements of the DSGVO, such as the principle of storage limitation according to Art. 5 para.1 DSGVO and the regulations on the Commercial Code regarding retention obligations.