Lesi Sivumelwano Sokucubungula Idatha ("i- DPA ") sakha ingxenye ebalulekile yeSivumelwano phakathi kwe -ELXAO SASU ("i -Processor ") kanye neklayenti (" uMlawuli ") futhi sisebenzisa i-Athikili 28 yoMthethonqubo (i-EU) 2016/679 ("i -GDPR ") kanye noMthetho Wokuvikela Idatha WaseFrance (uMthetho n° 78-17 ka-6 Januwari 1978 njengoba uchitshiyelwe). Sisebenza noma nini lapho i-ELXAO icubungula idatha yomuntu siqu egameni loMlawuli ngesikhathi sokuhlinzeka ngezinsizakalo.
Izincazelo
Amagama athi “idatha yomuntu siqu”, “ukucubungula”, “umlawuli”, “umprosesa”, “umprosesa ongaphansi”, “isihloko sedatha”, “idatha yesigaba esikhethekile” kanye “nokwephulwa kwedatha yomuntu siqu” anezincazelo ezinikezwe ku-Athikili 4 ye-GDPR. Imigomo yeSivumelwano isebenza kule DPA ngaphandle kwalapho le DPA iwadlula khona ngokusobala.
Isihloko, ubude kanye nohlobo lokucubungula
| Into | Incazelo |
|---|---|
| Inkinga esibhekene nayo | Ukuhlinzekwa kwezinsizakalo zokusebenza kokumaketha (amawebhusayithi, i-SEO, imidiya ekhokhelwayo, ukuhlaziya, i-CRM/i-imeyili, ukufaka uphawu, imidiya yezenhlalo, ukwenza indawo, i-PM/imicimbi) egameni loMlawuli. |
| Ubude besikhathi | Ubude besikhathi sokuzibandakanya, kanye nezikhathi zokugcina ezichazwe ngezansi. |
| Imvelo kanye nenhloso | Ukugcinwa, ukuhlela, ukuhlaziywa, ukudluliselwa, ukusingathwa kanye nokususwa kwedatha yomuntu siqu njengoba kudingeka ukuze kulethwe izinsizakalo. |
| Izigaba zezihloko zedatha | Abasebenzisi bokugcina bomlawuli, abazoba khona, amakhasimende, ababhalisile, abasebenzi, abahlinzeki kanye nababekhona emcimbini. |
| Izigaba zedatha yomuntu siqu | Idatha yokuhlonza (igama, isihloko), idatha yokuxhumana (i-imeyili, ifoni, ikheli leposi), idatha yobungcweti (inkampani, indima), izihlonzi eziku-inthanethi (i-IP, amakhukhi, ama-ID edivayisi), idatha yokuziphatha (ukuchofoza, amaseshini, ukuguqulwa), idatha yezentengiselwano (ama-oda, ukukhokhisa), idatha yemicimbi (ukubhaliswa, ukuba khona, amabheji, ukuqoshwa). |
| Idatha yesigaba esikhethekile | Akucutshungulwa ngokuzenzakalelayo. Noma yikuphi okuhlukile kudinga imiyalelo ebhaliwe kanye nezivikelo ezengeziwe. |
Izindima nemiyalelo
UMlawuli unquma izinhloso nezindlela zokucubungula. I-ELXAO icubungula idatha yomuntu siqu kuphela ngemiyalelo ebhalwe phansi yoMlawuli, ehlelwe yiSivumelwano, ama-oda, ama-SLA, iNqubomgomo Yobumfihlo yoMlawuli kanye nanoma yimiphi imiyalelo ebhaliwe ethile ethunyelwe ngemva kwalokho. I-ELXAO izokwazisa uMlawuli ngaphandle kokulibala okungadingekile uma ibheka umyalelo wokwephula umthetho wokuvikela idatha.
Ubumfihlo babasebenzi
I-ELXAO iqinisekisa ukuthi wonke umuntu ogunyaziwe ukucubungula idatha yomuntu siqu uboshelwe yisibopho sobumfihlo esiphoqelelwayo (inkontileka yomsebenzi, inkontileka yokuzimela noma i-NDA) futhi uthole ukuqeqeshwa ekuvikelweni kwedatha yomuntu siqu okufanele indima yakhe.
Izinyathelo zokuphepha
I-ELXAO isebenzisa izinyathelo zobuchwepheshe nezokuhleleka ezifanele (i-Article 32 GDPR), okuhlanganisa:
- Ukubethela kwe-TLS 1.2+ kusendleleni kanye nokubethela kwe-AES-256 kuphumule ezitolo zedatha yokukhiqiza.
- Ukulawulwa kokufinyelela okusekelwe ezindimeni ngesimiso selungelo elincane; ukuqinisekiswa kwezinto eziningi okuphoqelekile kubo bonke abaphathi.
- Ingqalasizinda eqinile, ephethwe yi-EU enokuskenwa kanye nokulungiswa kobungozi okuvamile.
- Ukubuyekezwa kwekhodi, ukuphathwa kwezimfihlo, i-SDLC evikelekile kanye nokuhlukaniswa kwezindawo zokukhiqiza/zokwenza isiteji.
- Ukungena ngemvume okuhlanganisiwe, okuvikelwe ubuqotho; ukuxwayisa ngemicimbi yokuqinisekisa okusolisayo kanye nokuthunyelwa kwedatha.
- Amakhophi agciniwe ahlukaniswe ngokwendawo, anokuhlolwa kokubuyiselwa okubhaliwe.
- Izinqubo zokungenisa/zokukhipha abasebenzi, umphathi wephasiwedi, ama-laptop avikelekile ane-full-disk encryption.
- Ukuqhubeka kwebhizinisi kanye nezinhlelo zokuphendula ezigamekweni zibuyekezwa okungenani minyaka yonke.
Ukucubungula okuncane
UMlawuli unikeza i-ELXAO imvume ejwayelekile yokusebenzisana nabaprosesa abangaphansi ukuze kwenziwe imisebenzi ethile yokucubungula (ukusingatha, ukulethwa kwe-imeyili, ukuhlaziya, amapulatifomu ezikhangiso, amathuluzi okusekela amakhasimende, amapulatifomu okuphatha imicimbi). I-ELXAO igcina uhlu lwamanje lwabaprosesa abangaphansi, olutholakala uma luceliwe [email protected] , futhi izonikeza okungenani isaziso sezinsuku ezingamashumi amathathu (30) sanoma yikuphi ukungezwa noma ukushintshwa okuhlosiwe, lapho uMlawuli angase aphikise khona ngezizathu ezinengqondo zokuvikela idatha. I-ELXAO ibeka izibopho zokuvikela idatha ze-sub-processor ngayinye ezingaphansi ezivikelayo njengalezo ezibekwe kule DPA.
Ukudluliselwa kwamanye amazwe
Idatha yomuntu siqu icutshungulwa ikakhulukazi ngaphakathi kwe-European Economic Area (EEA). Lapho ukucubungula kuhilela ukudluliselwa ngaphandle kwe-EEA ezweni ngaphandle kwesinqumo esanele, i-ELXAO ithembele ezivikelweni ezifanele ngaphansi kwe-Athikili 46 GDPR, ikakhulukazi i-European Commission's Standard Contractual Clauses (SCCs) yangomhlaka-4 Juni 2021, ehambisana nanoma yiziphi izinyathelo ezengeziwe ezidingekayo ekuhlolweni komthelela wokudlulisa.
Usizo kuMlawuli
I-ELXAO isiza uMlawuli, ngezinyathelo ezifanele zobuchwepheshe nezenhlangano, ekugcwaliseni izibopho zakhe zokuphendula izicelo zesihloko sedatha (Izihloko 12–22 GDPR) kanye nokuqinisekisa ukuhambisana nezihloko 32–36 GDPR (ukuphepha, isaziso sokwephulwa komthetho, i-DPIA, ukubonisana kwangaphambilini). Usizo olujwayelekile lufakiwe kumasevisi; umsebenzi omkhulu ongaphezu kosuku olulodwa (1) lokusebenza ngesicelo ngasinye ungakhokhiswa ngamanani ochwepheshe e-ELXAO akhona ngaleso sikhathi ngemuva kwesaziso esibhaliwe.
Ukwephulwa kwedatha yomuntu siqu
I-ELXAO yazisa uMlawuli ngaphandle kokulibala okungadingekile futhi kunoma yisiphi isimo zingakapheli amahora angamashumi ayisikhombisa nambili (72) ngemuva kokuqaphela ukwephulwa kwedatha yomuntu siqu okuthinta idatha yoMlawuli. Isaziso sihlanganisa uhlobo lokwephulwa kwedatha, izigaba kanye namavolumu acishe athinteke, imiphumela engaba khona kanye nezinyathelo ezithathiwe noma ezihlongozwayo zokubhekana nakho.
Ukuhlolwa kwezimali
I-ELXAO yenza kutholakale kuMlawuli, ngesicelo esinengqondo futhi kungabi ngaphezu kwesisodwa ngonyaka (ngaphandle kokwephulwa), ulwazi oludingekayo ukuze kuboniswe ukuthobela le DPA, okuhlanganisa nemibiko yohlobo lwe-ISO 27001 / SOC 2 evela kubacubunguli abangaphansi uma itholakala. Ukuhlolwa kwendawo kungenziwa nguMlawuli noma umhloli wezincwadi wesithathu ovunyelwe yizinhlangothi zombili oboshwe yimfihlo, ngezindleko zoMlawuli, ngesaziso sangaphambilini esifanele nangesikhathi samahora ebhizinisi, ngendlela engaphazamisi ngokungenasizathu imisebenzi ye-ELXAO.
Ukubuyiselwa noma ukususwa kwedatha
Lapho kuqedwa Isivumelwano, i-ELXAO, ngokukhetha koMlawuli okuchazwe zingakapheli izinsuku ezingamashumi amathathu (30), izobuyisela yonke idatha yomuntu siqu ngendlela ehlelekile, esetshenziswa kakhulu futhi efundeka ngomshini, noma iyisuse kuzo zonke izinhlelo zokukhiqiza nezokusebenza. Amakhophi ayisipele ayasuswa kumjikelezo ojwayelekile wokujikeleza (kuze kube yizinsuku ezingamashumi ayisishiyagalolunye (90)) futhi angagcinwa ngale kwaleso sikhathi kuphela lapho kudingeka khona ngumthetho osebenzayo, lapho-ke ehlala engaphansi kwezibopho zokuphepha nobumfihlo zale DPA.
Isibopho
Imibandela yesibopho se-MSA isebenza ezimangalweni ezivela ngaphansi kwale DPA. Iqembu ngalinye lihlala linesibopho kubantu abanolwazi kanye neziphathimandla zokuphatha ngokuhambisana ne-Athikili 82 GDPR.
Xhumana
Uma unemibuzo, isicelo noma isaziso sokuvikelwa kwedatha ngaphansi kwale DPA, xhumana ne-ELXAO [email protected] .