̽»¨´óÉñ

The ̽»¨´óÉñ EU data center is available to any organization that needs their data to be hosted within the EU region. It serves all 27 EU member states:
Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, and Sweden.
EEA(European Economic Area) countries: Iceland, Liechtenstein, and Norway

• To ensure that the new data center is GDPR compliant, we considered and implement the following areas:
  • Data Security Measures: Protect personal data against unauthorized access, processing, loss, destruction, or damage. This includes encryption, access controls, and security monitoring.
  • Data Minimization: Ensure only necessary personal data is collected and processed.
  • Purpose Limitation: Process personal data only for specified, explicit, and legitimate purposes.
  • Data Accuracy: Implement processes to ensure the accuracy of personal data and the ability to rectify inaccuracies.
  • Storage Limitation: Retain personal data only for as long as necessary for the purposes for which it was collected.
  • Data Subject Rights: Establish procedures to handle data subject rights requests, such as the right to access, rectification, erasure, restriction of processing, and data portability.
  • Lawful Basis for Processing: Ensure that all processing of personal data has a valid legal basis as outlined in GDPR. 
  • Data Processing Agreements (DPAs): Put appropriate DPAs in place with any third-party vendors involved in data processing at the data center.
  • Data Breach Notification Procedures: Establish clear procedures for detecting, reporting, and responding to personal data breaches.
  • Data Protection by Design and by Default: Integrate data protection principles into the design and operation of the data center and its systems.
  • Cross-border Data Transfer Mechanisms: Ensure safeguards are in place for data if it is transferred outside the EU/EEA. ̽»¨´óÉñ incorporates the Standard Contractual Clauses (SCCs) into its DPA for Customer Personal Data transfer from the EU to ‘third countries’ like the US.

̽»¨´óÉñ customers have access to their data unless they have given access to a third-party to access their data. Relevant ̽»¨´óÉñ employees and ̽»¨´óÉñ sub-processors (described at jumpcloud.com/gdpr) may also have access to such data subject to the terms of the DPA.