[et_pb_section fb_built=”1″ module_id=”our story” _builder_version=”4.16″ custom_padding=”||||true|false” global_colors_info=”{}”][et_pb_row use_custom_gutter=”on” gutter_width=”1″ make_equal=”on” module_id=”visio” _builder_version=”4.27.5″ width=”90%” module_alignment=”center” custom_css_main_element=”align-items:center;” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ background_enable_image=”off” background_position=”center_right” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.5″ header_4_font=”–et_global_body_font||||||||” header_5_font=”–et_global_body_font||||||||” width=”80%” max_width=”100%” module_alignment=”center” global_colors_info=”{}”]<\/p>\n
Magic Cloud Oy provides its customers with various ICT services that are produced, maintained and developed with an emphasis on information security. We produce the majority of our services from our own data centres in Finland. <\/p>\n
Together with our customers, we are responsible for the comprehensive security of our customers’ services, the compliance of operations and the continuity of service production. We ensure the confidentiality, integrity and availability of the customer’s service, regardless of whether the material is designated as confidential information. <\/p>\n
To safeguard customer data and achieve the necessary level of security, we use a range of technological and administrative security measures, which are described in more detail in this statement.<\/p>\n
This document is a statement of the security arrangements we use and implement. We have entered into a mutual service agreement with our customers, which sets out in more detail the services available to you. <\/p>\n
If you have any questions about the details of the report or the security of the service you are using, we will be happy to answer your specific questions.<\/p>\n
If the service provided by Magic Cloud to a customer involves the processing of personal data, the customer and Magic Cloud are responsible for their own legal obligations, either as data controller or data processor.<\/p>\n
When processing your personal data placed in the Magic Cloud cloud, you act as the controller of the personal data. If Magic Cloud processes such personal data on behalf of the Customer, Magic Cloud will act as the processor of the personal data and undertakes to act in accordance with both the law and any separate instructions given by the Customer in relation to such data. <\/p>\n
Magic Cloud acts as a data controller when processing personal data of its customers in its own systems, such as its own customer register.<\/p>\n
The customer owns all data stored and transferred to Magic Cloud services. Depending on the service used by the Customer, Magic Cloud’s IT infrastructure may collect personal data about the Customer’s personnel or the Customer’s customer’s personnel, for example, when the Customer connects its personnel to the Services or when using the software maintained by Magic Cloud. The personal data stored and their sensitivity vary depending on the service. <\/p>\n
At the end of the customer relationship, Magic Cloud closes the communication, information system, data transfer and remote access connections it has opened for the customer and removes the data stored by the customer from its system.<\/p>\n
Depending on the service provided to the customer, Magic Cloud’s technical support staff may have access to view the personal data of persons connected to the services, for example in connection with helpdesk operations. Magic Cloud may process personal data for the purposes of maintaining and updating the service and at the Customer’s initiative, for example, to resolve a problem. <\/p>\n
Magic Cloud may use subcontractors to provide some of its services. Where Magic Cloud uses subcontractors, it requires its subcontractors to comply with the same privacy principles. <\/p>\n
When processing the customer’s personal data, Magic Cloud complies with the good data processing practices and data protection provisions required by the European Data Protection Regulation.<\/p>\n
Magic Cloud is committed to keeping your confidential information confidential. Magic Cloud will not use or exploit the Customer Data for any purpose other than that provided for in the Service Agreement. In addition, the Customer Data will not be disclosed to any third party or made available to any third party without right by means of technical access or otherwise. <\/p>\n
Unless otherwise agreed with the customer, data transmissions requiring encryption will be encrypted using the appropriate encryption technology for the situation.<\/p>\n
Magic Cloud regularly updates and maintains the software and hardware in the data centre. For example, security updates are installed at least monthly. Magic Cloud’s data centre has an effective and up-to-date anti-virus and anti-malware mechanism in place. <\/p>\n
All data in the data centre is backed up at least daily and copies are stored in geographically separate locations.<\/p>\n
Our service centre is monitored 24\/7, with electronic access control and an alarm system that automatically reports on the status of the data centre. <\/p>\n
The health of servers and other hardware and software is monitored by a separate monitoring system, which generally allows a proactive response to potential problems and errors.<\/p>\n