Security and GDPR: implementation at Jarvis

Security and GDPR: implementation at Jarvis

At Jarvis, we take the security and confidentiality of your data. Since the beginning of our adventure, we have always been careful to collect your data in France in an ultra-secure way.

With the implementation of the General Data Protection Regulation (GDPR), effective on May 25, 2018, Jarvis continues to work in this direction by providing you with the following guarantees:

Appointment of a DPO

Jarvis has appointed an in-house Data Protection Officer (DPO) to monitor data collection and processing, train data security and privacy teams, and report any non-compliance with GDPR standards.

You can contact our DPO for any questions related to the GDPR, security or confidentiality of your data.privacy@jarvis-legal.com

Security Audit and Privacy Impact Assessment

Jarvis has launched an impact assessment on data protection, orPrivacy Impact Assessment (PIA), to ensure that the processing of your data is privacy-friendly and in accordance with GDPR standards.

Collection of data

Jarvis undertakes to collect data about you or your firm in strict compliance with the rules set out under the GDPR. You can consult ourTerms and Conditionsfor more detailed information.

Jarvis called on the services of a law firm expert in the GDPR, the firmStaub & Associates(89, boulevard Haussmann 75008 Paris), to guarantee your rights relating to European regulations: collection of consent, access and rectification of your data, portability of your data and right to be forgotten.

Data reduction

Jarvis is committed to updating your data in recent data centres (tier III or IV). These data centres are equipped with inverters and electricity groups, video surveillance and motion detection systems, and security personnel. Their access is strictly controlled and limited to authorized personnel with RFID badges and/or identified by biometric recognition.

In addition, Jarvis collects your data in your country of practice when technically possible and when that country is deemed appropriate according to GDPR standards. Thus, if you exercise:

  • in France, your data is hosted atOvhin Roubaix, Strasbourg, and Gravelines
  • in Luxembourg, your data is hosted atGandiin Bissen
  • in the United States, your data is hosted atAmazon Web Services(AWS) in Ohio

Security of data

Redundancy.Your data is distributed to other geographically remote data centers. If one of them defiles, access to your data automatically switches to another server and allows you to always have access to your data.

Backups.Your data is saved 3 times a day. These backups are kept for 3 months in case of need to restore data.
I'll be back
Encryption.Data that passes between your device and our servers is encrypted through SSL certificatesLet's Encrypt® bank grade using RSA encryption and a 4096-bit key.

Transfer of data

Jarvis works with subcontractors for commercial and management purposes. You can ask our DPO to provide you with a list of our subcontractors to find out who they are, the data they process and their compliance with the GDPR.