Data Transfers in an International Environment pursuant to Article 28 of the Data Act
- Jurisdiction of Data Processing
An overview of the countries in which the data of Finmatics customers are processed can be found here: https://www.finmatics.com/en/data-privacy/data-processors
- Technical and Organizational Measures – Prevention of Data Access by Third-Country Governments
Finmatics generally complies with the technical and organizational measures for data processing as set out in the Appendix to the Data Processing Agreement, available via this link, https://www.finmatics.com/en/data-processing-agreement.
In addition, Finmatics implements the following technical and organizational measures to prevent data access by third-country governments:
Public authorities may request access to information from Finmatics. This may include both personal and non-personal data.
In all cases, Finmatics adheres to applicable legal and contractual provisions as well as strict internal policies and procedures for reviewing access requests. Finmatics also consults legal counsel when necessary. Information is only disclosed if it is mandatorily required by law and only on the basis of valid court orders or comparable legal documents.
To prevent unauthorized access to the information stored by Finmatics, Finmatics also employs technical measures such as encryption and access controls.
Finmatics' security precautions are based on high technical standards for security and confidentiality.
Furthermore, we contractually ensure with our subcontractors that they also implement comparable technical and organizational security measures.
If we receive access requests from public authorities outside the EEA, we also ensure compliance with Article 32 of the Data Act. We comply with international orders for access and transfer only if they are based on an international agreement, such as a mutual legal assistance treaty, or if the criteria of Article 32 of the Data Act are met. Where possible, customers are informed about compliance with access and transfer requests.
Status: September 2025