The protection of your personal data
Protecting personal data is not a mere regulatory obligation, but a concrete responsibility that shapes the way we design, manage and protect our services, with care, transparency and measures appropriate to the context in which we operate.
How we protect, manage and share your data
We protect personal data with concrete, verifiable measures. Here you can find where we store it, how we manage it, with whom we may share it and how we act if something goes wrong.
In processing the data you entrust to us, we are committed to:
Storing data in controlled infrastructures, within the European Union.
Protecting data with technical and organisational measures, continuously updated.
Limiting access to authorised personnel only.
Constantly updating and monitoring the systems we manage.
Carefully selecting the providers involved and verifying their guarantees.
Notifying you promptly in the event of issues or breaches.
Where needed, we logically or physically separate the data and environments of different customers.
You will find these commitments described in our General terms and in the special service conditions.
It is essential to distinguish between the security of the infrastructures where your data is hosted and its management and implementation on your part.
The customer's role
The customer is solely responsible for the security of the resources and application systems it uses with NeoFlux services.
Infrastructure security
We directly oversee the infrastructure and systems on which the services run: data center security, network protection, access control, continuous updating and monitoring, in compliance with standards, certifications and GDPR requirements. The configuration and security of the resources and applications used remain the customer's responsibility.
Frequently asked questions about the GDPR
We process personal data with care, responsibility and measures appropriate to the context of the service provided. Data protection is embedded in the way we design, manage and maintain our infrastructure and our services.
Data is hosted and managed within controlled infrastructures located in the European Union. This allows us to maintain direct oversight of the environment in which data is processed and stored.
Where necessary to provide the service, we may rely on third-party providers that are carefully selected and vetted for the guarantees they offer regarding data protection. Any involvement on their part takes place only in compliance with the operating context and the applicable measures.
We adopt technical and organisational measures to protect data, control access, monitor systems and reduce the risk of unauthorised access or operational issues. Where the service provides for it, we also apply logic to separate the environments and data of different customers.
In the event of issues or breaches that may affect the data processed within the services we manage, we act in accordance with the established procedures and promptly inform the parties concerned where necessary. The goal is to ensure responsiveness, transparency and proper handling of the event.
Our role may vary depending on the service and the context in which the data is processed. Depending on the case, we may act as data controller or as data processor; where necessary, we also make available the contractual documentation and the data processing agreement, in line with the service provided and the applicable obligations.