At our site in Schwäbisch Hall, we store and process your devices in secure zones, to which only authorized employees have access. Access controls, including fingerprint recognition, and video surveillance protect against unauthorized access, theft, and manipulation. The information security management system is certified according to ISO/IEC 27001. In addition, encryption, role-based permissions, and multi-factor authentication ensure that the information in our systems is also protected. This means that your data is safeguarded from the moment it is received until it is finally deleted or destroyed. How the devices reach us safely is explained on the page Logistics.
At Second IT, forgotten data drives are systematically searched for, recorded, and then securely deleted or destroyed. Our staff inspect every device delivered for all storage media, from additional hard drives in old server cabinets to USB sticks and DVDs in drives to memory cards in shipping bags. Each found medium is registered with a serial number and is therefore completely traceable. After that, it is certified for destruction or, if necessary, mechanically destroyed. For you, this means that even data that no one else thought of when disposing of it will not end up in the wrong hands. For more information on physical destruction, read below. Data carrier destruction.
Yes, all delivered devices are checked for identifying features of your company, and these are completely removed. In the event of a later resale, no one will be able to trace back to a device from your inventory. This anonymization is carried out in accordance with GDPR and complements the certified data deletion: The deletion removes the stored content, while the anonymization provides information about the previous owner. Especially when devices are passed on through the online shop or employee sales, this protects your reputation and customer relationships. The assignment to your order remains internal via the serial number, so that you receive the appropriate documentation for each device.
Yes, the processes of Second IT are designed to meet all the requirements of the GDPR, from the initial collection to the final deletion or destruction. Each step is documented in a way that is audit-proof, so that you can prove to inspectors or your data protection officer at any time what has happened with each device. Our data protection officers monitor compliance with the GDPR and industry-specific regulations; the processes can be adapted to your industry’s requirements. Data is deleted using the software from Blancco, which has been certified by the BSI, among other things. The specific evidence you receive is described on the page. Data deletion.
The security measures are reviewed at least three times a year in external audits and are additionally continuously monitored internally. The basis are the certified management systems according to ISO/IEC 27001 for information security and ISO 9001 for quality. Our security protocols are continuously reviewed and improved; regular hardware checks and detailed quality assurance reports make the processes transparent for audits and certifications. For you, this means that you do not rely on self-reported information but on independently audited processes. An overview of the certificates can be found on the page. Certificates.