RGPD is the European Union's General Data Protection Regulation. Find out more about this link of the French government.
At Mercateam, we're on a constant journey to comply with this regulation. Here are our main RGPD measures in 10 points:
- We are certified ISO27001 and all our employees are trained in the subject;
- We have a clear contractual framework with our partners that specifies the responsibilities of each party with regard to the data shared between the two entities;
- We keep a processing register, identifying and updating all processing operations carried out on personal data transmitted to us;
- We have appointed a Data Protection Officer (DPO) who is responsible for ensuring internal compliance with our data protection policy;
- Our platform offers role-based access control (RBAC) ;
- It is possible to make interconnections between our platform and other software that you use to facilitate and protect the transfer of data;
- All connections to our platform are end-to-end encrypted;
- Data is automatically backed up daily as part of our data loss prevention policy, with a default retention period of 30 days;
- Our platform is hosted by Google Cloud Platformknown worldwide for its multiple layers of security;
- We have a main datacenter and a back-up datacenter located in Belgium, with a multi-regional storage system to ensure data redundancy.
NB: Within the framework of the services offered to its customers, Mercateam acts as a subcontractor of the latter. It is therefore also the responsibility of the latter to ensure that their operations comply with the RGPD, particularly with regard to operations for the collection of personal data that is then transmitted to Mercateam.