Key Messages
- ORCA is GDPR compliant and ensures that the GDPR Checklist is followed.
- ORCA is designed with a deep respect for your privacy. The data you chose to save in ORCA is encrypted and inaccessible to anyone at ORCA.
- Given that
- the data handled by the ORCA App is encrypted throughtout the whole lifecycle, including in consumption, transit, at rest and in use,
- nor ORCA nor our carefully selected vendors can access unencrypted data, not even when the Users is in the ORCA App,
- nor ORCA nor our carefully selected vendors have access to the technical keys that then ORCA is neither considered a data controller nor a data processor.
About the GDPR
The General Data Protection Regulation (GDPR)(new window) is a European Union privacy law effective May 25, 2018. Any organisation that collects, stores, or uses the personal data of EU citizens or residents must comply with the GDPR.
ORCA zero-trust model satisfies the Data Protection requirements
The GDPR and other similar regulations requires any organisation to implement technical measures to protect personal data in their possession: pseudonymisation, anonymisation, or encryption. The objective of these techniques is to reduce the potential for harm if personal data were to be breached.
ORCA AG uses zero-trust model to protect our Clients’ data at all times. Nor ORCA, nor ORCA’s employees or vendors can access the Users’ data in the clear at any point in time. These security measures guarantee that the sensitive can NOT be accessed, even if our servers were somehow breached.
Data Processing Agreement
Even though ORCA is NOT a Data Processor or Controller, ORCA provides a Data Protection Agreement, which the GDPR and other regulation require for organisations that use Sub-Processors services. This agreement establishes the rights and obligations of both parties under the law.
If you have any questions or feedback about it, please send an email to privacy@withorca.com.
Related Articles
You might be interested as well in: