Information security

To deliver voice consultancy services, project and operational support on routing solutions, call analytics and user experience design for our clients we must ensure a natural way of interaction for our clients. This may require processing data and information entrusted to us by our clients and their customers. Complying with the General Data Protection Regulation (GDPR) is very important to our organization. We respect the rights and privacy of data subjects, so we only process personally identifiable information in accordance with applicable privacy and data protection laws and regulations.

We constantly challenge ourselves to improve data protection policies and prevent data breaches and compliance violations with the GDPR. We monitor our performance and evaluate results to ensure progress towards our objectives and business process optimizations. Everyone at Sound of Data is committed to processing personally identifiable information securely, following the guidelines of the internal data protection policy and the GDPR.

Teamwork, engagement, ownership, and support from everyone in the organization are critical to achieving our data protection goals. We are committed to providing the necessary leadership and resources to enable Sound of Data to continuously improve, review, and communicate to all stakeholders the business processes and integrated management system.

We are committed to achieving the highest standards for our products and services. To this end, we have implemented an integrated management system that covers data protection, information security, and quality. This system is fully aligned with ISO standards and applies to the entire organization. It is verified annually by external certification bodies.

• We ensure that sufficient and appropriate information security measures are put in place to prevent any unlawful or unauthorized use, access, or accidental loss of personally identifiable information.

• We process personally identifiable information in a fair, lawful, and transparent manner. When relevant, we will ensure that individuals are aware of and consent to the collection and use of their personally identifiable information.

• We only collect, process, and store the personally identifiable information necessary to fulfill the specified purposes. We will not retain personally identifiable information beyond what is necessary for the purpose or purposes for which it was collected.

• We recognize that we are responsible for the personally identifiable information under our control. To ensure compliance with these principles and all applicable data protection laws and regulations, we have designated individuals to oversee this responsibility.

• We only process personally identifiable information in accordance with laws and regulations, and within the limits of the purposes specified in our privacy policy. Additionally, we adhere to the requirements outlined in our security policies and contracts with customers and suppliers.