Security, encryption & compliance archiving — found from sitemap — Tuta Business

Cited by

Facts read from this source

• Controller Report an error

  “Privacy Statement of Tutao GmbH”

• Controller address Report an error

  “Tutao GmbH Deisterstr. 17a 30449 Hannover Germany”

• Privacy statement language precedence Report an error

  “in case of a dispute or discrepancy between the German Data Privacy Statement and the English translation, the German version shall prevail”

• GDPR compliance Report an error

  “Processing of personal data takes place in compliance with the General Data Protection Regulation (GDPR) as well as with the country-specific data protection laws applicable to Tutao GmbH.”

• English contact email Report an error

  “Please contact us via email: hello@tutao.de.”

• ISO 27001 data centers Report an error

  “All data is stored in ISO 27001 certified data centers in Germany.”

• Encryption scope Report an error

  “All user data is stored end-to-end encrypted in Tuta (except for email addresses of users as well as senders and recipients of emails).”

• Privacy by design Report an error

  “Tuta is based on the data privacy principles “data minimization” and “privacy by design”.”

• No third party disclosure Report an error

  “With the exception of payment data, we will not disclose your personal data including your email address to third parties. However, we can be legally bound to provide content data (in case of a valid court order) and inventory data to prosecution services. There will be no sale of data.”

• Encrypted content no access Report an error

  “All textual content is encrypted for the user and its communication partners in a way that even Tutao GmbH has no access to the data.”

• Paypal Report an error

  “Address: PayPal (Europe) S.à r.l. et Cie, S.C.A.,22-24 Boulevard Royal, L-2449 Luxembourg”

• Braintree Report an error

  “For the execution of credit card payments your credit card data will be shared with our payment service provider Braintree. This includes the transfer of personal data into a third country (USA).”

• Mail server log retention Report an error

  “In order to maintain email server operations, for error diagnosis and for prevention of abuse, mail server logs are stored max. 7 days. These logs contain sender and recipient email addresses and time of connection but no customer IP addresses.”

• Personal data deletion period Report an error

  “The personal data shall be deleted no later than 30 days after termination of the contract, unless specific reasons to the contrary apply in an individual case.”

• Inventory data retention Report an error

  “Furthermore, inventory data can be stored for up to two years if the handling of a complaint and other reasons require this for an orderly settlement of the contract.”

• No cookies Report an error

  “We do not use cookies.”

• No google analytics Report an error

  “In particular, we do not use analysis tools such as Google Analytics or other third-party tools.”

• Usage statistics consent Report an error

  “If you have given consent in advance, your anonymized usage data will be sent to our servers.”

• Usage statistics revocable Report an error

  “You can revoke your consent to participate in the anonymized usage statistics at any time by deactivating this function in the settings of your account.”

• Campaign analysis retention Report an error

  “The hash and the campaign ID, keywords and search query stored together with the hash are deleted after 72 hours.”

• Right to object Report an error

  “If you would like to exercise your right to object, it is sufficient to send an email to: hello@tutao.de.”

• Collected inventory data Report an error

  “For invoicing and determining the VAT we collect for paid product variants the domicile of the customer (country) the name and invoicing address (for private users optional) the VAT identification number (only for business customers of some countries)”

• Collected payment data Report an error

  “Banking details (account number and sort code and IBAN/BIC, if necessary bank name, account holder), credit card data, PayPal user name.”

• Services description Report an error

  “Tuta provides services for saving, editing, presentation and electronic transmission of data, such as email service, contact management and data storage.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Security, encryption & compliance archiving
• The Data Protection Officer Migration, open standards & exit
• The Data Protection Officer European sovereignty
• The IT Administrator Security, encryption & compliance archiving
• The IT Administrator Migration, open standards & exit
• The IT Administrator European sovereignty
• The IT Service Provider Security, encryption & compliance archiving
• The IT Service Provider Migration, open standards & exit
• The IT Service Provider European sovereignty
• The Public Sector IT Lead Security, encryption & compliance archiving
• The Public Sector IT Lead Migration, open standards & exit
• The Public Sector IT Lead European sovereignty
• The Skeptic Security, encryption & compliance archiving
• The Skeptic Migration, open standards & exit
• The Skeptic European sovereignty
• The Small Firm Owner Security, encryption & compliance archiving
• The Small Firm Owner Migration, open standards & exit
• The Small Firm Owner European sovereignty
• The Small Firm Owner Pricing transparency