Infomaniak and the protection of your personal data
If your organisation processes personal data, you are probably subject to the provisions of the General Data Protection Regulation (GDPR). In this regard, you are subject to certain obligations that must be complied with. The same applies to Infomaniak, which, depending on its role, has specific obligations as a subcontractror.
Our commitments as a subcontractor
As a web hosting provider, Infomaniak is committed to complying with its obligations under the GDPR. As a result, you are also able to comply with the aspects of your regulatory obligations that are linked to our services.
As a subcontractor, Infomaniak undertakes to:
Store your data in our data centers based exclusively in Switzerland, and never transfer your data outside our own infrastructure.
Implement high security standards and maintain continuous improvement processes to provide you with a high level of security as part of our services.
Maintain and develop our physical security measures to prevent unauthorised access to the infrastructures on which your data is stored.
Be exemplary in terms of our responsiveness to security updates on the systems we manage.
Be transparent when we use subcontractors who may process your data.
Notify you as soon as possible in the event of a data breach.
Have physical and / or logical isolation systems (depending on the services) to isolate customer hosting solutions from each other and carry out intrusion tests once a year to ensure that data is watertight between customers.
These commitments are set out in our general terms and conditions and special terms and conditions.
It's essential to distinguish between the security of the infrastructure on which your data is hosted and the way in which you operate and implement it.
The customer's role
He is solely responsible for the security of the resources and application systems he uses with Infomaniak services.
Infomaniak's role
We are committed to ensuring the security of our infrastructures, notably through a security policy that meets the requirements of various standards, certifications as well as the GDPR.
FAQs about the GDPR
Am I in compliance with the GDPR when using Infomaniak services?
By hosting your data, Infomaniak acts as a subcontractor and complies with the obligations imposed on it by the GDPR.
Please nevertheless be aware that you remain responsible for the data you host with us and for the use you make of it.
Il faut distinguer la sécurité de nos infrastructures, qui relève de notre responsabilité, de l'usage que vous faites de vos données, qui relève de la vôtre. Les obligations d'Infomaniak en tant que sous-traitant sont détaillées dans l'Accord sur le traitement des données (DPA) et ses annexes ainsi que dans nos conditions générales et particulières.
We encourage you to consult specialised guides online to learn about your obligations and to seek professional assistance if necessary.
What is Infomaniak's role and responsibility with regard to the GDPR?
Like all companies that work with European citizens, Infomaniak must comply with the General Data Protection Regulation:
- ●
Our confidentiality policy details the data that Infomaniak processes to provide its services in its capacity as a data controller.
- ●
The Data Processing Agreement (DPA) outlines Infomaniak's commitments in its capacity as a subcontractor hosting all your data.
- ●
Does Infomaniak have a data protection officer?
Yes, Yoann Lopez is Infomaniak's main contact for all matters concerning the use, management and protection of personal data. As Data Protection Officer, he is responsible for informing and advising data controllers, all company employees and, where applicable, our subcontractors.
If necessary, please contact us directly at dpo@infomaniak.com.