Data Processing & Security

We take the security of your data seriously. Learn about our commitment to GDPR compliance and data protection.

Security Measures

Data Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

Access Control

Role-based access control (RBAC) ensures users only access data they're authorized to view.

Data Backup

Regular automated backups with point-in-time recovery capabilities.

Audit Trails

Comprehensive logging of all system activities for compliance and security monitoring.

GDPR Compliance

Our Commitment

SpiceRoute is fully committed to GDPR compliance. We process personal data lawfully, fairly, and transparently. We only collect data that is necessary for the purposes for which it is processed.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ('right to be forgotten')
Right to restrict processing
Right to data portability
Right to object to processing
Rights related to automated decision-making

Data Processing Agreement

For clients who use our platform services, we offer a Data Processing Agreement (DPA) that outlines our responsibilities as a data processor and your responsibilities as a data controller.

Data Protection Officer

For questions about data protection or to exercise your rights, contact us:

SpiceRoute

Bjørkesvingen 2j, 3408 Tranby, Norway

info@spiceroute.no

Data Breach Notification

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR.