Handling payment, promotion and participant data securely
Data Security
Cashback promotions, refunds and other campaigns involve the personal and payment details of thousands of participants. So it has to be crystal clear where that information ends up, who can access it and what happens to it. That's why data security sits at the heart of our approach.
- All data processed and stored securely within Europe, always
- Fully ISO 27001 and ISO 9001 certified
- Active control over access, use, retention periods and destruction
Built for big promotions
Handling personal and payment data
Trusted by many
100+ top brands
choose us
25+ years and counting
Market leader in the Benelux
and growing fast across Europe
Security by design
For us, data security covers the entire process of every promotion. We're critical about how much information we ask participants for, and we make sure that data reaches us securely. Access rights are assigned by role, and everything is stored securely within European borders.
A set of standing security measures keeps our data security where it should be:
- We only collect the data a promotion actually needs
- Files are delivered through a secure environment
- Data is encrypted in transit and at rest
- Data is hosted on servers within the European Union
- Access is restricted by role and need
- Two-factor authentication and logging keep access auditable
- Data from different clients is kept strictly separate
- Once a promotion ends, defined retention periods and destruction procedures apply
"Good information security isn't something you should merely be able to promise. You need to show which data is processed, where it's kept, who can access it and which checks take place along the way."
Certified and continuously audited
Desk Services is certified to both ISO 27001 (information security) and ISO 9001 (quality). That means we protect data properly and document our way of working, check it and reassess it at regular intervals.
We test our security through regular internal audits and penetration tests, so any weak spots in systems or processes come to light early. All our staff work under strict confidentiality, receive regular security awareness training and get access rights on a need-to-know basis.
Does something go wrong despite all these safeguards? Then an incident and data breach procedure is ready to go, including escalation and notification of the relevant authorities.
Benefits
Data stays in Europe
Never transferred elsewhere
Encrypted data
In transit and at rest
Strict access control
With 2FA and logging
Segregated data
Kept separate per client
Fraud prevention
Anomaly checks
Regularly tested
Audits and penetration tests
Knowing for certain that data is safe
Promotions can generate tens of thousands, sometimes hundreds of thousands, of registrations. So you want to be certain that personal and payment details are safe. Curious how we make sure of that?
Get in touch with Martijn or Kris and ask away.
"Don't just ask the partner running your promotion whether data is processed securely. Ask where the data is stored, who has access, how that access is logged and what happens to the data afterwards. Those answers are what reveal how mature information security really is."
ISO 27001 and ISO 9001 are the foundations we build on in our day-to-day work on data security: collecting carefully, exchanging securely and processing under control.
Your promotion, your participants. Their data, processed securely by us.
Contact us