Data Protection Policy

AB HANDSHAKE CORPORATION

Date: 01/01/2024
Valid until 31.12.2024

The management of AB Handshake Corporation displays a dedication to safeguarding data by establishing policies and requirements, assigning specific roles, fostering a robust data protection culture, and providing necessary resources. The company is accountable for adhering to General Data Protection Regulation (GDPR), and other relevant privacy laws. AB Handshake Corporation comprehends its duties and obligations in processing personal data.

The personal data at AB Handshake Corporation are:

• Processed legally, fairly, and transparently concerning the data subject;
• Gathered for specific, clear, and lawful purposes;
• Appropriate, relevant, and limited to what is necessary for the intended purposes;
• Kept accurate and updated when needed;
• Stored for no longer than necessary for the intended purposes;
• Handled securely to maintain the confidentiality, integrity, and availability of the personal data.

AB Handshake Corporation is able to demonstrate compliance with this statement (accountability).

AB Handshake Corporation upholds the rights of individuals (such as being informed, accessing data, rectifying information, being forgotten, restricting processing, data portability, objecting, and rights concerning automated decision making and profiling) and ensures compliance with these rights. The company also evaluates potential risks to individuals' rights and freedoms and conducts a data protection impact assessment (DPIA) when necessary.

AB Handshake Corporation has put in place appropriate technical and organizational safeguards to ensure security commensurate with the associated risks. These measures include:

• Masking personal data through pseudonymization and encrypting it;
• Ensuring that processing systems and services maintain ongoing confidentiality, integrity, availability, and resilience;
• Being able to promptly restore access to personal data in case of incidents;
• Regularly testing, assessing, and evaluating the effectiveness of security measures.

The company's information security and privacy management systems align with ISO/IEC 27001:2022 and ISO/IEC 27701:2019 standards and are continuously refined for enhancement.

The Data Subjects can contact us at privacy@abhandshake.com.

The Data Protection Policy is subject to periodic assessment, revision and updating every year or, if necessary, at shorter intervals to reflect changing conditions.

Approved by:  Nadejda Papernaia