{"id":61063,"date":"2020-06-09T13:35:56","date_gmt":"2020-06-09T11:35:56","guid":{"rendered":"https:\/\/invitario.com\/tom-general-technical-and-organizational-measures\/"},"modified":"2026-07-21T13:47:53","modified_gmt":"2026-07-21T11:47:53","slug":"tom","status":"publish","type":"page","link":"https:\/\/invitario.com\/en\/tom\/","title":{"rendered":"TOM – General technical and organizational measures"},"content":{"rendered":"

[et_pb_section fb_built=”1″ next_background_color=”#ffffff” admin_label=”Page Title Section” _builder_version=”4.16″ background_color=”#f3f6fd” background_color_gradient_direction=”100deg” background_enable_image=”off” custom_padding=”100px||100px|” bottom_divider_style=”curve2″ bottom_divider_height=”50px” global_colors_info=”{}”][et_pb_row admin_label=”Page Title Area” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text admin_label=”Title” _builder_version=”4.16″ text_font=”||||||||” header_font=”|700|||||||” header_font_size=”48px” header_2_font=”||||||||” text_orientation=”center” max_width=”750px” module_alignment=”center” custom_margin=”|||” header_font_size_tablet=”” header_font_size_phone=”36px” header_font_size_last_edited=”on|phone” global_colors_info=”{}”]<\/p>\n

General technical and organizational measures<\/h1>\n

pursuant to Art. 32 para. 1 DSGVO <\/h2>\n

[\/et_pb_text][et_pb_button button_url=”https:\/\/invitario.com\/wp-content\/uploads\/2021\/03\/TOM-Invitario-29x03x2021.pdf” button_text=”Save as PDF” button_alignment=”center” _builder_version=”4.27.7″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ _builder_version=”4.16″ max_width=”1080px” module_alignment=”center” global_colors_info=”{}”][et_pb_row _builder_version=”4.16″ global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ global_colors_info=”{}”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

Introductory provisions<\/h2>\n

Invitario has provided the security acc. Artt. 28 para. 3 lit. c, 32 GDPR, in particular in conjunction with Art. 5 para. 1, para. 2 GDPR must be established. Overall, the measures to be taken are data security measures and measures to ensure a level of protection appropriate to the risk with regard to the confidentiality, integrity, availability and resilience of the systems. <\/p>\n

The technical and organizational measures are subject to technical progress and further development. In this respect, Invitario is permitted to implement alternative adequate measures. The safety level of the defined measures must not be undercut. Significant changes must be documented. <\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ global_colors_info=”{}”][et_pb_text _builder_version=”4.27.7″ hover_enabled=”0″ inline_fonts=”Georgia” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n

General technical and organizational measures (TOM)<\/h2>\n

Since the Contractor operates the Invitario Internet service exclusively on the infrastructure of the sub-processor Amazon Web Services EMEA SARL (AWS), which specializes in external server hosting, at the Frankfurt am Main location and no personal data of participants is stored or processed on the Contractor\u2019s premises, the following TOMs are limited to the security measures taken by the Contractor on its premises.<\/p>\n

Information on the TOM for external server hosting can be found at:<\/strong>
https:\/\/aws.amazon.com\/de\/compliance\/data-center\/controls\/<\/a><\/p>\n

The sub-processors used by Invitario are available at:<\/strong>
https:\/\/support.invitario.com\/portal\/de\/kb\/articles\/sub-auftragsverarbeiter<\/a> <\/p>\n

The contractor encrypts all personal data in the Invitario Internet service securely (256bit) using the AWS Key Management System, so that unauthorized access to this data is impossible.<\/p>\n

In addition, the Contractor shall take the following measures:<\/strong><\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.16″ global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ global_colors_info=”{}”][et_pb_text _builder_version=”4.16″ global_colors_info=”{}”]<\/p>\n

1. Access control<\/h4>\n

Measures to prevent unauthorized persons from gaining access to data processing systems that are used to process personal data:<\/p>\n