Technical and Organizational Measures for GDPR Compliance

This document is a technical report detailing the technical and organizational measures (TOM) implemented by Yoummday GmbH to comply with the General Data Protection Regulation (GDPR) as per Article 32. It outlines the principles, IT infrastructure, and individual measures taken to ensure confidentiality, integrity, and availability of personal data. The report describes various access control measures, including physical security, user authentication, and data encryption protocols to protect against unauthorized access. Additionally, it addresses the responsibilities of the IT personnel and the Data Protection Officer, along with the organizational controls in place for data management and incident response. The document emphasizes the importance of regular reviews and updates to the measures to maintain compliance with GDPR standards. Each section provides explicit details on the status and requirements of the implemented measures, ensuring a comprehensive approach to data protection.