Data encryption On-Rest
All personal data is encrypted accordingly to a current technical procedure when it is stored in our system (currently AES-256). Even with physical access to the servers, it is not possible to read the data. Backup systems also work with encrypted storage, so that these are also protected against unauthorized access.
Data encryption during transmission All access to our servers is exclusively encrypted by using an SSL connection (recognizable by "https://" at the beginning of the Internet address). Also, administrative access by employees is only possible via encrypted connections. This is an effective measure to prevent personal data from being read during transmission.
The selection of our service providers, such as data centres or cloud providers, we work exclusively with service providers, who can assure us, that they also comply with the GPDR. The data centre we use is ISO 27001 certified and all servers we use, are located in Germany.
Principle of data minimisation
We only store the personal data, that we need to fulfil our services and apply the principle of data minimisation. Access to personal data also only occurs, when we need it to provide our services.
Rights of the users
According to the provisions of the GPDR, you as a user have the right, among other things, to obtain information about your personal data stored by us. You can also request the deletion of your data at any time. An informal email to us is sufficient to exercise these rights.
Caprice Crawford Photographyas a processor Accordingly, to the definition of the GPDR we are a so-called processor for customers of for example our or the agency software: we process personal data on behalf of the responsible customers. As the GPDR is valid to all companies dealing with personal data, including casting offices or agencies we used for our example, these customers must ensure, that they process personal data themselves in accordance with the provisions of the GPDR and only cooperate with service providers that comply with these provisions.
When these customers choose Caprice Crawford Photography as their service provider, they have the assurance that the personal data provided to us for processing, will be processed in accordance with the applicable requirements. Depending on the type and scope of processing, customers can also conclude an agreement with us on order processing; we will be happy to provide you with a corresponding contract template at your disposal.
Kontakt: Caprice Crawford Uhlandstraße. 53 10719 Berlin