{"id":13861,"date":"2023-06-16T09:24:13","date_gmt":"2023-06-16T07:24:13","guid":{"rendered":"https:\/\/stage.autorolasolutions.com\/?page_id=13861"},"modified":"2025-01-29T10:00:06","modified_gmt":"2025-01-29T09:00:06","slug":"it-data-security","status":"publish","type":"page","link":"https:\/\/stage.autorolasolutions.com\/ar-en\/digital-ecosystem\/features\/it-data-security\/","title":{"rendered":"IT & Data Security"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

IT & Data Security<\/h1>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Information Security<\/strong><\/h2>\n
\n

Autorola’s information security practices are governed by a set of fundamental principles, ensuring alignment with industry standards, a cohesive and robust security framework, and a commitment to safeguarding sensitive data while enabling our business to thrive and maintain a positive reputation.<\/p>\n

Compliance with International Standards: <\/strong>Our information security management system adheres to globally recognized best practices, such as ISO 27001, ISO 27002, and ISO 27005.<\/p>\n

Leadership and Guidance<\/strong>: The Chief Information Security Officer (CISO) leads the Information Security function, responsible for creating the Information Security Manual, encompassing policies, standards, procedures, and guidelines. This function serves as an internal center of excellence, providing leadership and guidance on all information security matters.<\/p>\n

Prudent Investment in Security:<\/strong> We make wise investments in proven information security controls based on lifecycle cost\/benefit assessments and risk analyses.<\/p>\n

Organization-Wide Responsibility:<\/strong> Information security is embedded throughout the entire organization, safeguarding all information assets under our care, including those we own and those entrusted to us. It is integrated into our IT architecture, operational processes, and management procedures, making every individual accountable for information security.<\/p>\n

Integral to Corporate Governance:<\/strong> Information security is a core element of corporate governance, closely intertwined with IT management, physical site security, risk management, legal and regulatory compliance, and business continuity. It fulfills our obligations to employees, business partners, and the broader community.<\/p>\n

Business Enabler:<\/strong> Information security serves as a business enabler, allowing us to confidently pursue and maintain relationships, markets, and opportunities that might otherwise seem too risky. By minimizing losses from security breaches, it supports our financial well-being and enhances our corporate image as a trustworthy, open, honest, and ethical organization.<\/p>\n

Sensitive Data Protection:<\/strong> We prioritize the protection of sensitive data as defined by GDPR Article 9 and Article 10. Registration of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data, biometric data for unique identification, health data, and data concerning sex life or sexual orientation is strictly prohibited. Exceptions only apply to preapproved registration of trade-union and required health information of employees when necessary.<\/p>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t
<\/div>
GDPR compliance<\/div>
At our organization, we are committed to upholding the key principles of the GDPR when processing personal data to fulfill our obligations to both our customers and the data subjects. We take full responsibility for implementing and maintaining this policy to ensure compliance with the GDPR. Our approach to processing personal data ensures appropriate security and confidentiality. We protect against unauthorized access, unlawful use, accidental loss, destruction, or damage of personal data and the processing equipment, employing suitable technical and organizational measures.<\/div><\/div><\/div><\/div>
<\/div>
Data rights<\/div>
Our employees and data processors with access to personal data are bound by strict confidentiality obligations. We always aim to accommodate data subject requests, even if not legally mandated, to uphold their rights. We process personal data lawfully and fairly, ensuring transparency in all communications related to the processing of our customers' personal data. We use clear and plain language to make information easily accessible and understandable.<\/div><\/div><\/div><\/div>
<\/div>
Personal data<\/div>
Personal data is collected for specific, explicit, and legitimate purposes, and we do not use it in ways incompatible with these purposes. The reasons for processing personal data are explicit and determined at the time of collection. We process personal data only to the extent necessary for the intended purposes, ensuring adequacy and relevance. The storage period for personal data is kept to a strict minimum. Personal data is not retained beyond the legally permissible and required period. We store personal data only as long as necessary for the processing purposes.<\/div><\/div><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\n\n
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

YOUR ADVANTAGES<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t