Outsourcing customer service to Türkiye means transferring personal data to a third country. Here is how we protect that data.
Certified to ISO 27001 and ISO 9001
Our information security management system is certified to ISO/IEC 27001, our quality management to ISO 9001.
Data processing under Art. 28 GDPR
We sign a data processing agreement (DPA) with every client. We process data only on your instructions and only for the agreed purpose.
Transfers to Türkiye
There is no EU adequacy decision for Türkiye. We therefore base transfers on the EU standard contractual clauses (SCCs) and support you with the transfer impact assessment. Turkish data protection law (KVKK) applies in addition.
Technical and organisational measures
- Wherever possible we work directly in your systems – the data stays with you
- Personal user accounts and need-to-know access
- Confidentiality undertakings and data protection training for all employees
- Deletion or return of data at the end of the contract
We provide our full technical and organisational measures during contract negotiations.