Skip to main content

Data Protection

Introduction​

At Mindsmiths, we prioritize the protection of your data. We are committed to maintaining the highest standards of data security and privacy. This page provides comprehensive information about our data protection practices and the measures we take to safeguard your information.

Data Protection Measures​

  • Encryption: We employ AES-256 encryption for data at rest and TLS 1.2 and higher for data in transit, ensuring that your data is securely stored and transmitted.
  • Access Controls: Strict access controls are implemented, ensuring that only authorized personnel with a need-to-know basis can access your data. We also follow the principle of least privilege and use role-based access control (RBAC) to limit access to sensitive information.
  • Network Security: Our systems are protected by advanced firewalls, intrusion detection systems, and regular security assessments to safeguard against unauthorized access.

Compliance with Regulations​

Mindsmiths is committed to ensure the privacy and protection of personal data. We diligently follow the guidelines and principles set forth by the General Data Protection Regulation (GDPR). We prioritize data privacy, transparency, and the rights of individuals when handling personal data, and continuously strive to align our practices with GDPR standards. Our data handling practices align with the principles outlined in these regulations, including data minimization, purpose limitation, and lawful processing

Data Handling Practices​

  • Data Minimization: We collect and retain only the data necessary to provide our services. We prioritize data minimization to reduce the potential impact in case of a breach.
  • Purpose Limitation: Your data is processed only for the intended purposes specified at the time of collection, and we do not use it for any other purposes without obtaining your consent.
  • Anonymization and Pseudonymization: When appropriate, we apply anonymization or pseudonymization techniques to further protect your personal data.

Access Controls​

  • Authorized Access: Access to your data is granted only to authorized personnel who require it to perform their duties. Access is strictly controlled and monitored to prevent unauthorized use or disclosure.
  • Monitoring and Logging: We maintain comprehensive access logs and conduct regular monitoring to detect and respond to any unauthorized access attempts or suspicious activities promptly.

Incident Response​

In the event of a data breach or security incident, we have robust incident response procedures in place. Our dedicated team follows the NIST incident response process, ensuring swift detection, containment, eradication, recovery, and post-incident analysis to minimize any potential impact.

User Rights and Transparency​

  • Data Subject Rights: We respect your rights regarding your personal data. You have the right to access, rectify, and delete your data, as well as the right to restrict or object to its processing.
  • Transparency: Our privacy policy provides clear and transparent information about how we handle your data, including details on the purposes of processing, data retention periods, and your rights as a data subject.

External Audits and Certifications​

To validate our commitment to data protection, we undergo regular audits and hold certifications, such as ISO 27001. These external validations assure you that our security controls and practices align with internationally recognized standards.

Support and Reporting​

If you have any concerns or questions regarding data protection or wish to report a data-related issue, our dedicated support team is available to assist you.

By implementing these comprehensive data protection measures and adhering to regulatory requirements, we strive to provide a secure environment for your data and maintain your trust in our services.