Where are Owens' data processing facilities and data centers located, and what are their data privacy practices?
Owens is committed to protecting data privacy and security through robust measures, including secure data processing, hosting, backup, and compliance with data protection laws.
At Owens, we are committed to protecting the privacy and security of your personal data. We understand the importance of data protection in today's digital age and have implemented robust measures to safeguard your information.
Data Processing and Hosting
Our data processing operations are conducted in the following offices:
- Owens OnLine LLC (USA)
- Owens Europe Screening, Ltd. (Ireland)
- Owens Asia, Inc (Philippines)
- Owens Private Ltd (India)
Production and infrastructure servers, along with their backups, are housed in a US data center managed by a reputable cloud provider. This cloud provider holds multiple certifications related to data security and privacy, including ISO 27001, ISO27017/18, ISO 27701, SOC 1/2/3, FedRAMP, HITRUST CSF, and PCI. Our data are stored in the following Google Data Centers:
- Production Data Center (us-central1-a) >> Council Bluffs, IA 51501, USA (map link)
- Backup Data Center for DR purposes (us-west1-a) >> 4200 Columbia Rd, The Dalles, OR 97058, USA (map link)
Data Security Measures
We employ a variety of solutions and technical controls to protect your data, including:
- Encryption: Using strong encryption algorithms to protect data both in transit and at rest.
- Access controls: Implementing robust access controls, such as MDM and zero-trust access control to restrict access to sensitive data.
- Security monitoring: Continuously monitoring our systems for threats and vulnerabilities, such as WAF, Antivirus, and regular scanning
- Regular audits: Conducting regular security audits to identify and address potential risks.
Data Controller Responsibilities
As a data controller, Owens is responsible for ensuring that personal data is processed lawfully, fairly, and transparently. We have implemented robust policies and procedures to comply with data protection laws, including:
- Data subject rights: We provide individuals with the ability to exercise their rights under data protection laws, such as access, rectification, erasure, restriction of processing, data portability, objection, and automated decision-making.
- Lawful basis: We have established lawful bases for processing personal data, such as consent, contract, or legitimate interest.
- Data minimization: We collect and process only the personal data necessary for the specific purposes of our operations.
- Data transfers: We have appropriate safeguards in place for transferring personal data.
By adhering to these policies and procedures, we are committed to protecting the privacy and rights of individuals whose personal data we process. We believe that data privacy is a fundamental right, and we are dedicated to ensuring that your information is handled with the utmost care.