In the implementation framework of the new European Rules and Regulations for data protection, the Group Qualibroker-Swiss Risk & Care, a member of the Group Diot-Siaci, applies the personal data protection policy determined by the Group.
Within the limits defined by the Group Diot-Siaci, the Group Qualibroker-Swiss Risk & Care applies the seven principles applicable to the treatment of personal data:
In order to apply these principles and to conform to the new Rules and Regulations, Qualibroker-Swiss Risk & Care SA has established a road map to enable the expected standards to be reached, not only for the surveillance authorities but also for the company's clients/partners.
Step 1 : Setting up a register of data treatments of a personal nature Step 2 : Analysis of treatments and possible adjustments Step 3 : Contractual adjustments if necessary and documentation Step 4 : Implementation of Privacy Impact Assessment (PIA) Step 5 : Construction of actions to safeguard treatments when the results of the PIA have shown a risk
In parallel with these various steps and for new projects for treatments, Qualibroker-Swiss Risk & Care will set up data protection methods when the treatment is designed and by default (minimisation of the collection, collecting only what is strictly necessary, etc.) and by retaining the proof (file with data exchanges in all formats: e-mail, note, report, etc., meaning "privacy by design" and "privacy by default"). Also, in parallel, the Direction of Qualibroker-Swiss Risk & Care will disseminate the culture of GDPR to its staff in order to heighten their awareness of this subject, and to ensure that the new Rules and Regulations are applied strictly at every level of the company.
To ensure its policy of personal data protection, the Group Qualibroker-Swiss Risk & Care, a member of the Group Diot-Siaci, stores its data on a 100% Swiss cloud.
Mindful of its obligations concerning IT security, the Group Qualibroker-Swiss Risk & Care does everything in its power to provide an operating platform in conformity with its clients' expectations by focusing on:
Taking these elements into account, the Group Qualibroker-Swiss Risk & Care has placed its trust in Swisscom, the long-standing Swiss player, who has already been recognised by several private Swiss banks as a partner known as an authority on the subject, by storing its data in the ESC cloud (Enterprise Service Cloud) by Swisscom.
This cloud offers the following guarantees:
Swisscom also meets the constraints of the expected provisions as the ESC cloud is certified ISO IEC 27001, FINMA & ISAE.