Data Protection Concept and Technical Measures

This document is a technical report detailing the data protection concept implemented by KUMAVISION AG in accordance with Article 32 para. 1 of the General Data Protection Regulation (GDPR). It outlines the technical and organizational measures necessary to ensure the protection of personal data, emphasizing the importance of data security as a complementary aspect of data protection. The report describes various control areas including confidentiality, integrity, and availability, along with procedures for periodic review and assessment. It also specifies the organizational aspects such as the appointment of a Data Protection Officer and the commitment of employees to maintain data secrecy. Furthermore, the document details security measures including access control, data access control, and data usage control, ensuring that only authorized personnel can access sensitive information. The measures are designed to prevent unauthorized access and ensure the integrity and confidentiality of personal data throughout its lifecycle.