CAMPAIGN FOR REDUCTION OF CARBON EMISSIONS AND MARINE POLLUTION

Iwrobotx is committed to data protection, privacy, security, and compliance with applicable regulatory frameworks in the EU and abroad. The cloud-based architecture is designed from the ground up with data protection, privacy, and security in mind. The Iwrobotx Cloud technical architecture and its internal administrative and procedural safeguards assist customers with the design and deployment of cloud-based networking solutions. The cornerstone of Iwrobotx’s privacy driven architecture is our out-of-band control plane. This means only network management information (not user traffic data) flows from devices to the Iwrobotx cloud, dramatically limiting the amount of personal data that is transferred to the Iwrobotx cloud. In addition:

• Iwrobotx Master Data Protection Agreement (IMDPA)—The IMDPA reflects our commitment to privacy, data security, and accountability for our customers, worldwide. If you would like to put in place the IMDPA, please contact your Iwrobotx cloud account representative to get started.
• GDPR—The European Union General Data Protection Regulation (EUGDPR) brings consistency to the data protection landscape in Europe. GDPR embodies the well-recognized privacy principles of transparency, fairness, and accountability. Iwrobotx is committed to helping our customers and partners by protecting and respecting personal data, no matter where it comes from or where it flows. The MDPA described above incorporates the most current Standard Contractual Clauses adopted by the European Commission (also known as the EU Model Clauses) so that customers may allow transfer and processing of personal data outside the EEA in accordance with applicable European privacy and data protection regulations and local laws, including the GDPR.

Iwrobotx offers 2 options to customers for storing data. 1st Local Server onside (Customer’s Server). 2nd Cloud Server (Based in Munich).

If the customer requests, the customer's data is provided on the customer's own server. The data stored on the client server can be displayed on the online Dashboard via the REST API. If the online Dashboard is not required for the customer, there is data on the local dashboard. In this case, server security and data policies belong to customers' policies.

IWROBOTX service is collocated in fully redundant and highly available data center with certifications such as SAS70 type II. These data center feature state of the art physical and cyber security and highly reliable designs.

• 99.99% uptime service level agreement (that’s under one hour per year)
• 24×7 automated failure detection — all servers are tested every five minutes from multiple locations
• Rapid escalation procedures across multiple operations teams
• Independent outage alert system with 3x redundancy

• Rapid failover to hot spare in event of hardware failure or natural disaster
• Out of band architecture preserves end-user network functionality, even if connectivity to the Iwrobotx cloud services is interrupted
• Failover procedures drilled weekly

• Rapid failover to hot spare in event of hardware failure or natural disaster
• Out of band architecture preserves end-user network functionality, even if connectivity to the Iwrobotx cloud services is interrupted
• Failover procedures drilled weekly

• 24×7 automated intrusion detection
• Protected via IP and port-based firewalls
• Remote access restricted by IP address and verified by public key (RSA)
• Systems are not accessible via password access
• Administrators automatically alerted on configuration changes

• Only network configuration and usage statistics are stored in the cloud
• End user data does not traverse through the data center
• All sensitive data (e.g., passwords) stored in encrypted format

• A high security card key system and biometric readers are utilized to control facility access
• All entries, exits, and cabinets are monitored by video surveillance
• Security guards monitor all traffic into and out of the data centers 24×7, ensuring that entry processes are followed

• Data centers feature sophisticated sprinkler systems with interlocks to prevent accidental water discharge
• Diesel generators provide backup power in the event of power loss
• UPS systems condition power and ensure orderly shutdown in the event of a full power outage
• Each data center has service from at least two top-tier carriers
• Seismic bracing is provided for the raised floor, cabinets, and support systems
• In the event of a catastrophic data center failure, services fail over to another geographically separate data center

• Over-provisioned HVAC systems provide cooling and humidity control
• Flooring systems are dedicated for air distribution

• Iwrobotx data center undergo daily vulnerability scanning by an independent third party

• The Iwrobotx service is collocated in fully redundant and highly available data centers

The data (e.g. configuration, statistics, monitoring, etc.) that flows from network devices (e.g. wireless access points, switches and security appliances) to the Iwrobotx cloud over a secure internet connection.

Data related to user traffic (e.g. web browsing, internal applications). User data does not flow through the Iwrobotx cloud, instead flowing directly to their destination on the LAN or across the WAN.

SCALABILITY

• Unlimited throughput: no centralized controller bottlenecks
• All devices data can add to a Dashboard at local server or cloud server

RELIABILITY

• Redundant cloud service provides high availability
• Network functions even if management traffic is interrupted

SECURITY

• No user traffic passes through Iwrobotx’s data center
• Enables HIPAA compliant network

Iwrobotx’s cloud-based location analytics and user engagement solution provides data about the physical locations of visitors, enabling businesses to better understand the behavior of clients. Location Analytics is available with all Cisco Meraki wireless access points. Location Analytics data is gathered by capturing and analyzing the beacons that every Wi-Fi/Bluetooth enabled device periodically emits when its Wi-Fi/Bluetooth antenna is turned on in order to detect the presence of nearby wireless networks. The Iwrobotx dashboard also displays anonymized and aggregated statistics on nearby devices, whether they join the network or not. Location Analytics distinguishes between devices and recognizes repeat visitors by collecting a MAC address, the unique identifier assigned to every device connecting to wired or wireless networks. Only a device’s MAC address is captured, and the aggregated data provided to businesses using Location Analytics can’t be traced back to an individual without the business having prior knowledge of the MAC address of that person’s device.

In addition to providing statistics to businesses within the Iwrobotx dashboard, customers can use the Location Analytics API to export MAC addresses of probing clients, consistent with industry standards. Retail and enterprise customers can use the Location Analytics API to integrate Location Analytics data from their network with their own custom-built applications. The Location Analytics API provides no mechanism for users to connect MAC addresses with any other personal information. We provide a set of best practices to users of the Location Analytics API, and it is their responsibility to take appropriate measures to safeguard the privacy of personally identifiable information that they may collect.

The General Data Protection Regulation (GDPR) (Regulation [EU] 2016/679) is a regulation by which the European Commission intends to strengthen and unify data protection for individuals within the European Union (EU). It forces stricter responsibilities on organisations to prove that they have adequate processes in place to manage and protect personal data. The major goals of GDPR are protection of an individual´s personal data and the definition of the rules for the free movement of personal data in the EU. The EU defines “Personal Data” as “any information relating to an individual, whether it relates to his or her private, professional, or public life. It can be anything from a name, a photo, an email address, bank details, posts on social networking websites, medical information, or a computer’s IP address.” The new obligations pertain to any organisation that handles data about EU citizens—whether that organisation is in the EU or not. The regulation does not apply to the processing of personal data for national security activities or law enforcement (“competent authorities for the purposes of prevention, investigation, detection, or prosecution of criminal offences or the execution of criminal penalties”).

Iwrobotx is committed to data protection, privacy, security, and compliance with applicable regulatory frameworks in the EU and abroad. The cloud-based architecture is designed from the ground up with data protection, privacy, and security in mind. The Iwrobotx Cloud technical architecture and its internal administrative and procedural safeguards assist customers with the design and deployment of cloud-based networking solutions. The cornerstone of Iwrobotx’s privacy driven architecture is our out-of-band control plane. This means only network management information (not user traffic data) flows from devices to the Iwrobotx cloud, dramatically limiting the amount of personal data that is transferred to the Iwrobotx cloud. In addition:

• Iwrobotx Master Data Protection Agreement (IMDPA)—The IMDPA reflects our commitment to privacy, data security, and accountability for our customers, worldwide. If you would like to put in place the IMDPA, please contact your Iwrobotx cloud account representative to get started.
• GDPR—The European Union General Data Protection Regulation (EUGDPR) brings consistency to the data protection landscape in Europe. GDPR embodies the well-recognized privacy principles of transparency, fairness, and accountability. Iwrobotx is committed to helping our customers and partners by protecting and respecting personal data, no matter where it comes from or where it flows. The MDPA described above incorporates the most current Standard Contractual Clauses adopted by the European Commission (also known as the EU Model Clauses) so that customers may allow transfer and processing of personal data outside the EEA in