Technical and organisational security measures

  1. Internal data privacy and IT security policies, incl. procedures according to applicable laws and regulations, are implemented and regularly reviewed and updated as required.
  1. Appointment of individuals with data privacy and IT security responsibilities (e.g., IT security officer, data protection officer (if required under applicable law)).
  1. Access to personal data by individuals is subject to appropriate confidentiality obligations. 
  1. Regular training of employees in data privacy and IT security. 
  1. Regular internal and external audits to check adherence to data privacy and IT security policies and assess/evaluate whether these are appropriate for ensuring protection of personal data.
  1. Use of encryption for storing of personal data. 
  1. Encryption of personal data in cases of online transmission or transport by means of mobile data carriers. 
  1. Appropriate segregation of data sets (e.g., segregation of data sets of different controllers, separation of test / development data and production data. 
  1. Implemented physical access authorisations (according to the sensitivity of the data and criticality of the processing) for employees and third parties. 
  1. IT system access control policy for employees and third parties accessing IT systems on the basis of need-to-know principle and taking into account the sensitivity and criticality of the processing. 
  1. IT systems accessible through unique and password protected user accounts (based on state of the art policies for creation of secure passwords). 
  1. Data back-up and recovery policies and procedures are implemented. 
  1. Implemented business continuity strategy, including recovery time objectives. 
  1. Sub-processors engaged by THRIVE have formalised, documented and controlled data processing arrangements in place. 
  1. Implemented Data Loss Prevention tools and techniques.

Contact

We are contactable by email at privacy@thrivelearning.com. 

Thrive Learning Limited is incorporated and registered in England with company number 10988277 and whose registered office is at: 27 Market Place, Bingham, Nottingham, Nottinghamshire, England, NG13 8JY