Table of content
uniFLOW Online privacy statement
For more information on uniFLOW Online's privacy policy, click here:
How are data requests handled?
If NT-ware receives a request for personal data for an individual, we will handle this in accordance with local legislation. Data will always be handled in accordance with the laws applicable to the region where it is stored. NT-ware will do its utmost to inform the data owner of the request unless instructed otherwise by the government or law enforcement agencies.
Privacy questions and reporting
We take the handling of personal data very seriously. If you have any privacy concerns or feel there has been a data breach of any kind, please inform us immediately. We are committed to responding within 12 hours of the initial report.
- Please direct privacy communication to privacy@nt-ware.com.
- NT-ware has a dedicated Data Protection Officer (DPO) who will review any queries along with relevant security and internal departments.
Can NT-ware access my data?
To provide support and services, NT-ware will require access to systems and servers that may contain customer personal information.
- Personally identifiable information (PII) access follows our "need to know" model and is restricted to a limited number of people in NT-ware Operations/Dev Ops.
- PII is only actively accessed in response to a support request.
- If we are collecting information under a legal request, see: "How are data requests handled".
- PII Information accessed during a support investigation will never leave NT-ware or be shared with sub-processors.
The information NT-ware can access depends somewhat on the chosen configuration. Please carefully consider the functional and installation options that best suit your security requirements. Your Canon or Canon partner can help you with the best design options to keep print jobs local and reduce the PII present in the cloud service. Further options, such as using your own Mail Servers and Identity Providers, can further reduce the overall information exposure.
Has NT-ware performed a Transfer Impact Assessment (TIA)?
The obligation to conduct a TIA arises from the Schrems II ruling and clause 14 of the Standard Contractual Clauses (SCC). The TIA comprises an independent analysis of the security level of a third country to which data is to be transferred. It is a mandatory form of risk assessment for data transfers to "unsafe" third countries.
An "unsafe" third country in terms of data protection is a country outside the EU that does not offer an adequate level of data protection. Where the European Commission does not issue an adequacy decision for a third country, other appropriate safeguards must be applied when transferring data to that country, e.g. Standard Contractual Clauses (SCCs).
We implemented SCC and conducted a TIA for the data transfer to NT-ware USA.
For more information, please contact:
Technical and Organizational Measures (TOMs)
NT-ware has defined its current technical and organizational measures. NT-ware may change these at any time without notice, so long as it maintains a comparable or better level of security. Individual measures may be replaced by new measures that serve the same purpose without diminishing the security level protecting personal data.