Learn about all the requirements onyo meets regarding data protection.
The protection of your data is very important to us and a central component of onyo's products and services. Therefore, we naturally comply with data protection regulations, particularly the requirements of the EU General Data Protection Regulation (GDPR).
What requirements does the EU General Data Protection Regulation provide?
Since May 25, 2018, the EU regulation has been in effect as national law. It aims to strengthen data protection law across Europe and create a uniform legal framework under the acronym GDPR. onyo is fully GDPR-compliant both as a company and concerning our software. Thus, your personal data is comprehensively protected.
To ensure data processing security, we have implemented technical and organizational measures, which we continuously develop.
Where is my data stored?
onyo relies on the services of Digital Ocean as a hosting provider. All customer data is stored on ISO/IEC 27001-certified servers in Frankfurt with encrypted backups in the Netherlands and Ireland, ensuring that data does not leave the EU. This means the servers meet our high standards for the physical security of your data.
Our data protection officer and the state data protection authority have confirmed the data protection-compliant use of Digital Ocean in Germany.
Who can access my data?
All data is stored exclusively in encrypted form, and we generate the master keys so that neither Digital Ocean nor other third parties can access your data. Of course, the master keys are secured and not freely accessible.
At onyo, only our product managers, the Customer Success Team (customer system side), and our infrastructure team (server side) can access the data when necessary. This is required to support the initial account setup and the handling of service requests. The allocation of access rights and access to customer systems are always logged. The customer determines the release of the onyo account for our support staff. You can learn more about onyo's support access.