GDPR is the General Data Protection Regulation of the European Union. You can learn more about it on this link from the French government.
At Mercateam, we are constantly working towards compliance with this regulation. Here are our main GDPR measures in 10 points:
We are certified ISO27001 and all our collaborators received the related training;
We have a clear contractual framework with our partners that specifies the responsibilities of each party with respect to the data shared between the two entities;
We keep a record of processing, identifying and updating all processing operations carried out on personal data that is transmitted to us;
We appoint a data protection officer (DPO) who is responsible for ensuring compliance with the data protection policy internally;
Our platform offers role-based access control (RBAC) functions;
It is possible to make interconnections between our platform and other software you use to facilitate and protect the transfer of data;
All connections to our platform are end-to-end encrypted;
Data is automatically backed up daily as part of our data loss prevention policy, with a default retention period of 30 days;
Our platform is hosted on Google Cloud Platform, known worldwide for its multiple security layers;
We have a primary data center and another backup located in Belgium with a multiregional storage system to ensure proper data redundancy.
NB: As part of the services offered to its clients, Mercateam acts as a subcontractor of its clients. Therefore, it is also the clients' responsibility to ensure the compliance of their operations with GDPR, particularly with regards to the collection of personal data that is subsequently transmitted to Mercateam.
If you have any more questions on the subject, you can always contact us!