Privacy

NT-ware utilizes regional data centers, so our customers' data is located within an appropriate region and legal governance for each respective customer.

uniFLOW Online privacy statement

For more information on uniFLOW Online's privacy policy, click here: uniFLOW Online privacy policy

How are data requests handled?

If NT-ware receives a request for personal data for an individual, we will handle this in accordance with local legislation. Data will always be handled according to laws applicable to the region in which the data is stored. NT-ware will do its utmost to inform the data owner of the request unless instructed otherwise by government or law enforcement agencies.

Privacy questions and reporting

We take the handling of personal data very seriously. If you have any privacy concerns or feel there has been a data breach of any kind, please inform us immediately. We are committed to providing a response within 12 hours of the initial report.

Please direct privacy communication to privacy@nt-ware.com.
NT-ware has a dedicated Data Protection Officer (DPO) who will review any queries along with relevant security and internal departments.

Can NT-ware access my data?

To provide support and services NT-ware will require access to the systems and servers which may contain customer personal information.

Personally identifiable information (PII) access follows our 'need to know' model and is restricted to a limited number of people in NT-ware Operations/ Dev Ops.
PII is only actively accessed in response to a support request.
If we are collecting information under a legal request, see: 'How are data requests handled'.
PII Information accessed during a support investigation will never leave NT-ware or be shared with sub processors.

What information NT-ware can access is somewhat dependent upon the chosen configuration. Please consider carefully the functional and installation options to best suit your security requirements. Your Canon or Canon partner can help you with the best design options to keep print jobs local and reduce the PII present in the cloud service. Further options, such as using your own Mail Servers and Identity Providers, can further reduce the overall information exposure.

Has NT-ware performed a Transfer Impact Assessment (TIA)?

The TIA should primarily be seen as another form of risk assessment for data transfers to “unsafe” third countries.

A (data protection) “unsafe” third country is a country outside the EU that does not offer an adequate level of data protection. Where the European Commission will not provide an adequacy decision to a third country other appropriate safeguards must be provided when transferring data to such a third country e.g. standard contractual clauses (SCC).

The obligation to conduct a TIA arises from the Schrems 2 ruling (which declared the EU-US Privacy Shield invalid) and SCC. The TIA comprises an independent analysis of the security level of a third country to which data is to be transferred.

NT-ware’s subsidiaries in the USA* and Singapore have implemented SCC and conducted a TIA.

For more information, please contact privacy@nt-ware.com

^{*NT-ware is monitoring the new Privacy Shield (recently agreed to by the European Commission and the USA) and will respond regarding the TIA and SCC once the Privacy Shield has been evaluated and is in force.}

Technical and Organizational Measures (TOMs)

NT-ware has defined its current technical and organizational measures.
For more information on our technical and organizational measures, click here.