About security measures

UPB seeks to protect users’ personal data through various appropriate technical and organisational measures. From a technological point of view, it uses various mechanisms and controls in accordance with the best practices in the field, with the aim of guaranteeing the confidentiality, integrity, availability and resilience of personal data. With a view to the security of personal data, UPB implements the following measures: a) Restrictions on access to personal data, based on the ‘need to know’ criterion as well as the competences and attributions of those accessing it, applied in strict accordance with what was communicated to the holder of the personal data when it was collected; b) The transfer of personal data through encrypted communication channels; c) Special category data is stored in encrypted form, as are the corresponding backup copies; d) Protection of technological infrastructures with technical and organisational mechanisms to prevent unauthorised access; e) Monitoring of technological infrastructures at various levels, such as access control, misuse and abnormal traffic, with the aim of preventing, detecting and stopping unauthorised access to personal data.