Search

Data Security & Privacy

  • Anonymization of personal data in collana pay
    In the context of transactions processed through collana pay, personal data is collected. To ensure data protection and the security of our users' information, a process for anonymizing this data exists. The personal data collected during a transaction is automatically anonymized after a periodof...
  • Is there a backup for the payment transaction data?
    The underlying databases are located in two separate Microsoft Azure data centers in different countries. The complete data of payment transactions is mirrored between these data centers. Within the data centers, the data is stored on a minimum of 3 independent storage resources (Storage Stamps)....
  • How are the publicly available endpoints secured against misuse and attacks?
    All transaction endpoints are protected with a web application firewall (WAF), which protects against general security risks as well as exploits. Rules defined based on the OWASP core rule sets 3.2 are used for this purpose. The endpoints are accessible exclusively via HTTPS. The underlying Ciphe...
  • What is Microsoft doing to comply with data protection and the GDPR?
    Microsoft will comply with its obligations to all Customers under the "Processing of Personal Data; GDPR" section of the Online Services Provisions and the provisions of the EU General Data Protection Regulation in Schedule 4 of the Online Services Provisions, effective 25 May 2018. The...
  • What security measures does collana pay use?
    We are aware of the importance of security in payment transactions. Our team maintains high security standards and we strive to provide an extremely secure service. The collana pay cloud service consists of various cloud resources that Microsoft provides on its Azure cloud platform and already pr...