Trust is the cornerstone of our business.

We have built a comprehensive data privacy framework across our company that satisfies and complies with data protection laws, empowering us to safeguard and protect the personal data we process and handle for our customers.

We are continually developing our approach to data privacy, seeking opportunities to enhance, streamline, and align our approach with expanding data privacy expectations. Some of our privacy controls include:

Continually reviewing and monitoring our data processing activities to ensure ongoing compliance with data protection laws and regulations.

Developing a record consistent with Article 30 GDPR, allowing us to fully understand important factors, including the categories of personal data, the source of the data, the purpose and means of processing, and the recipients of personal data.

Consistently considering how our products, services, and strategies are impacted by data protection rules.

A dedicated privacy team responsible for developing and bolstering our data privacy framework and upholding compliance with expanding laws and regulations, in collaboration with key stakeholders.

Implementing a robust security infrastructure across our business, centered around organizational and contractual measures combined with technological controls. Protection of our and our customers' data is of vital importance to us. For more information on our security posture and certification, visit our Security page.

Regularly reviewing and adapting our Data Processing Agreement and Privacy Policy to ensure our terms accurately reflect our business and that our contracts continue to satisfy the requirements of Article 28 GDPR.

Promoting transparency and choice in our products, services, and website, empowering our customers and visitors to make informed decisions about how their data is processed, including cookie management and various other tools to assist individuals in exercising their data subject rights under GDPR.

Implementing a privacy management platform whereby data subject rights requests can be fulfilled in a timely manner and with ease. For more information on how to exercise your data subject rights, please see our Privacy Policy.

Continually reviewing our data retention policies and schedules to ensure alignment with the data minimization and storage limitation principles of GDPR.

Privacy by Design and Default is at the core of everything we do. We ensure that the data privacy impacts of a new initiative, third-party vendor, or product are considered at the forefront of that project lifecycle.

Promoting a security-first culture – our people recognize the importance of data privacy. Our dedicated privacy and security teams work hard to align our people, policies, procedures, and technology to protect our data and systems.

Performing thorough diligence reviews of the third-party vendors we work with who may process personal data as a data processor or subprocessor. FARISEC has a stringent ‘Vendor Management Process,’ meaning key stakeholders assess vendor suitability before approval is granted to onboard. We enter into Data Processing Agreements that satisfy at least the requirements of Article 28 GDPR and offer adequate protection for personal data processed by FARISEC and our customers.

Implementing a robust Security Incident and Data Breach Reporting policy and procedure to allow for efficient and transparent breach notification to both data protection authorities and/or data subjects when FARISEC is the data controller, or to impacted customers when FARISEC is a data processor. FARISEC has appointed a ‘Rapid Response Team,’ consisting of key stakeholders from across our business, responsible for handling a data breach and/or security incident.