|
It Services: Consulting, Software Development, Internet And Support – Safe Storage Of Servers. The Object Of The Acquisition Is A Solution That Can Be Used To Provide A Securely Isolated And Managed Server Container For Backed-Up Data. The Solution Must Enable Safe Storage, Processing And Utilization Of Backups In A Separate Entity, Disconnected From The Production Environment. The Solution Must Also Support The Investigation And Analysis Of Data Security Deviations, Such As Ransomware Situations, So That The Backed-Up Data Can Be Viewed And Analyzed Safely In An Isolated Environment Without Affecting Production Environments. Authorization Of Data Processing, Location, Administrative Connections And Protection The Servers Secure Storage Service, Which Is The Subject Of Acquisition, Contains Backup Data That Can Be Replicated From The Subscribers Backup Environment, Which May Include, In Addition To The Subscribers Own Data, E.G. Information From The Patient Information Systems Of The Owner-Customers And Thus Personal Information Belonging To Special Personal Data Groups Referred To In Article 9 Of The Eu General Data Protection Regulation. The Processing Of Data Belonging To Special Personal Data Groups Is Basically Prohibited, But The Processing Is Permitted When An Exception To The Prohibition Has Been Established. In This Service, Processing Is Necessary To Manage Healthcare Information Systems And Services And To Ensure The Continuity And Returnability Of Services (Gdpr 9(2)(H)). The Processing Is Carried Out In Accordance With The Instructions Of The Owner-Customers (Data Controllers); The Customer Acts As A Personal Data Processor And Is Responsible For The Management Of Subprocessors (Supplier With Possible Subcontractors). To Ensure The Registrars Duty Of Attestation, Controllability And A High Level Of Protection Of The Processed Data, The Subscriber Requires That: 1) The Verification Data Is Stored And Processed Exclusively In Data Centers Located In Finland, And 2) Service Management Connections (Maintenance And Management Traffic And Possible Remote Management Solutions) Are Also Allowed Only From Finland, And 3) The Verification Data Is Encrypted (In Transit And At Rest) And The Service Is Provided Only To The Subscriber In A Dedicated Environment. The Claim Is Limited To Only The Assurance Service That Is The Subject Of The Procurement And Is Proportionate To The Purpose Of The Procurement And The Nature Of The Data Being Processed.
|