Skip to main content

Data Security & Privacy

Your data protection is our highest priority throughout the entire recovery process

At DataHelp, we understand that your data is sensitive and confidential. Whether it's personal photos, business documents, or financial records — we treat every recovery case with the highest level of security and discretion. Our security protocols meet EU data protection standards (GDPR) and go beyond regulatory requirements.

GDPR and legal compliance

Our data recovery operations fully comply with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and applicable national laws including the Austrian DSG and German BDSG. We adhere to four key principles:

Data Minimisation

We access your data only as far as the recovery requires – for example checking sample files are intact – and do not browse, copy or share them beyond that.

Purpose Limitation

Your device and data are used exclusively for the recovery and for no other purpose.

Storage Limitation

Recovered data is archived for 7 days after handover for verification, then irreversibly destroyed.

Integrity & Confidentiality

All data is stored on encrypted, access-controlled systems within our secure laboratory.

Laboratory security

Our recovery laboratory in Prague maintains strict physical security measures:

  • Restricted access — Only assigned technicians can access your device. No unauthorised personnel enter the recovery area.
  • Surveillance — The laboratory is monitored 24/7 with security cameras and access logging.
  • Secure storage — All client devices are stored in locked, catalogued locations when not being worked on.
  • Dust-free workspace — ISO Class 5 laminar flow boxes for work on opened drives, preventing contamination.

Employee confidentiality

Every DataHelp employee signs a comprehensive confidentiality agreement. Our technicians are trained to:

  • Open client files only to verify a recovery, never to browse them
  • Process recovery tasks using automated tools that handle data at the block level
  • Report any security incidents immediately
  • Follow strict chain-of-custody procedures for all client devices

NDAs and extended protection

For corporate clients, law firms, healthcare providers, financial institutions, and government agencies, we offer customised Non-Disclosure Agreements (NDA) at no additional cost. Our NDA options include:

  • Extended confidentiality obligations beyond standard terms
  • Contractual penalties for any breach of data protection
  • Restricted personnel — only named technicians handle your case
  • Custom data destruction procedures upon completion
  • Compliance documentation for your internal audit requirements

Data handling and destruction

We follow a strict data lifecycle for every recovery case:

1

Reception

Your device is catalogued, assigned a unique case number and stored securely.

2

Diagnostics

Initial assessment in our laboratory. You receive a detailed report and a binding quote.

3

Recovery

Data is recovered to our secure encrypted storage. Only the assigned technician has access.

4

Handover

The recovered data is transferred to the drive of your choice and delivered by secure courier or collected in person.

5

Archival

A copy of the recovered data is retained for 7 days so you can check it — please verify your data within this period.

6

Destruction

After 7 days, all copies of your data are securely erased using certified data-erasure software. Your original device is returned to you or securely disposed of, as you instruct.

Frequently asked questions

Is my data safe during the recovery process?

Yes. Your data is handled only by assigned technicians in our secure laboratory, bound by confidentiality. We open files only to verify the recovery and do not browse, copy or share them beyond that. Storage is encrypted, access is logged and we comply with GDPR.

Can you sign an NDA for my company?

Yes, we provide customised NDAs free of charge for corporate clients, law firms, healthcare providers, and government agencies. Contact us to discuss your specific requirements.

What happens to my data after recovery?

After handover, we keep a copy of the recovered data for 7 days so you can check it — please do so within this period. After 7 days, all copies are securely and irreversibly deleted. Your original device is returned to you or securely disposed of, as you instruct.

Are you GDPR compliant?

Yes. Our operations fully comply with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the German Federal Data Protection Act (BDSG). We implement all required technical and organisational measures.