GDPR & Data Protection Policy
Entity: Nexa Core Services Inc.
Jurisdiction: Global (EU/UK GDPR, Philippine Data Privacy Act of 2012)
1. Introduction
Nexa Core Services Inc. (“we,” “us,” or “our”), a premier BPO and Virtual Assistant firm based in the Philippines, is committed to the highest standards of data privacy and security. As a Data Processor for our international clients, we adhere to the General Data Protection Regulation (GDPR) to ensure that the personal data of EU and UK residents is handled with integrity, transparency, and robust security.
2. Roles and Responsibilities
- Data Controller: Our Client (The entity that determines the purpose and means of processing).
- Data Processor: Nexa Core Services Inc. (The entity processing data on behalf of the Client).
- Sub-Processors: Any third-party tools or contractors engaged by Nexa Core Services Inc. to fulfill service obligations.
3. The “Philippines-EU” Data Bridge
The Philippines’ Data Privacy Act of 2012 (RA 10173) is heavily modeled after the EU’s Data Protection Directive. Nexa Core Services Inc. ensures compliance through:
- Standard Contractual Clauses (SCCs): We utilize the latest EU-approved SCCs in our service agreements.
- Data Sovereignty: We ensure data remains within the client’s preferred cloud environment (e.g., AWS/Azure regions).
4. Technical and Organizational Measures (TOMs)
- Encryption: Data at rest and in transit is protected using AES-256 encryption.
- Access Control: Strict “Need-to-Know” access logs and Multi-Factor Authentication (MFA).
- Clean Room Operations: For sensitive tasks, VAs operate in a paperless/phoneless environment.
5. Breach Notification Protocol
In the event of a suspected data breach, Nexa Core Services Inc. will notify the Data Controller within 24 to 48 hours of discovery and collaborate fully to mitigate impact.
6. Contact Information
Nexa Core Services Inc. Compliance Team
Email: privacy@nexacoreservices.com
Address: Alabang-Zapote Road 9/F Filinvest One Bldg, Northgate Cyberzone, Northgate Ave, Muntinlupa, 1781