General Data Protection Regulation (GDPR)
Subsurface Solutions is 100% committed to data protection. That’s why we welcome the General Data Protection Regulation (also known as the GDPR), which was recently approved and adopted by the European Union (EU).
What is the GDPR?
​
The GDPR is a regulation intended to strengthen and unify data protection for all individuals within the EU. It aims to protect the fundamental right to privacy and the protection of personal data.
Subsurface Solutions and the GDPR
​
We have worked with a team of experts and have implemented the required adjustments to our products, services, and documentation, to ensure compliance with the GDPR. This empowers Subsurface Solutions customers to get more control over their personal data and gain the tools necessary to protect the information of visitors to Subsurface Solutions website.
We are dedicated to data protection and have effectively reinforced this over the past 15 years.
​
What are we doing to ensure data protection for all our customers?
-
We employ a security consultant, dedicated to the security of our customer information.
-
Subsurface Solutions is Payment Card Industry Data Security Standards (PCI DSS) compliant through PayPal portal and is accredited as a level 1 service provider and merchant. This standard helps create a secure environment by increasing cardholder data, thus reducing credit card fraud. We regularly perform internal security audits to maintain our ISO/PCI security certifications.
-
Subsurface Solutions's signup and login services are completed through a secure server (HTTPS/SSL).
-
Subsurface Solutions uses cryptography hash functions to protect your information. Your password is stored as a hash digest and, in the event of a security breach, your original password cannot be recovered from our servers.
-
Subsurface Solutions is certified under the EU-US Privacy Shield Framework and the Swiss-US privacy Shield Framework as set forth by the U.S. Department of Commerce, regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States, and therefore adheres to the Privacy Shield Principles.
-
In accordance with the GDPR, site visitors have the right to access their data or "be forgotten" (to be permanently deleted from our database). Subsurface Solutions will assist you with this. Please contact us anytime if you would like to be forgotten.