Data protection

To deliver voice consultancy services, project and operational support on routing solutions, call analytics, and user experience design for our clients, Sound of Data may process data and information entrusted to us by our clients and, where applicable, their customers. This processing supports the reliable delivery, operation, and improvement of our services and may include the handling of personally identifiable information.

Complying with the General Data Protection Regulation (GDPR) is of critical importance to our organization. We respect the rights and privacy of data subjects and ensure that personal data is processed lawfully, fairly, and transparently, and only for specified and legitimate purposes. We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, in accordance with applicable privacy and data protection laws and regulations.

We continuously challenge ourselves to improve our data protection governance and to prevent data breaches and compliance violations. We monitor performance and evaluate outcomes to ensure progress towards our objectives and effective integration of data protection into our business processes. Everyone at Sound of Data is responsible for processing personal data securely and in line with internal data protection policies and regulatory requirements.

Teamwork, engagement, ownership, and support from everyone in the organization are critical to achieving our data protection objectives. We are committed to providing the necessary leadership and resources to enable Sound of Data to review, maintain, and communicate its data protection practices as part of our integrated management system.

We are committed to achieving high standards in the way we design, deliver, and operate our services and organizational processes. To this end, we have implemented an integrated management system that brings together our key governance domains. This system applies to the entire organization and supports consistent, controlled, and responsible management of our activities. Where applicable, our integrated management system is aligned with internationally recognized standards and is subject to independent assessment.

• We ensure that adequate and appropriate information security measures are in place to prevent unlawful or unauthorized use and access and/or accidental loss of personally identifiable information.

• We process personally identifiable information in a fair, lawful and transparent way. Where appropriate, we will make sure that individuals are aware of, and consent to ,the collection and use of their personally identifiable information.

• We only collect, process and store the necessary personally identifiable information required to fulfill the specified purposes and we will not keep personally identifiable information for longer than is necessary for the purpose or purposes for which it was collected.

• We recognize that we are responsible for the personally identifiable information under our control, and for this reason we have designated individuals responsible for compliance with these principles and all applicable data protection laws and regulations.

• We only process personally identifiable information as permitted by laws and regulations, and within the limits of the purposes set out in our privacy policy, and in accordance with the requirements set forth in our security policies and contracts with customers and suppliers.