General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) is the European Union law implemented by the European Union on 25 May 2018. The regulation replaces the Data Protection Directive 95/46/EC.

GDPR requires organizations to safeguard personal data and uphold the privacy rights of anyone in EU territory. The regulation includes seven principles of data protection that must be implemented and eight privacy rights that must be facilitated. It also empowers member state-level data protection authorities to enforce the GDPR with sanctions and fines.

SuperOps is aware of its obligations as a processor under the GDPR and remains committed to supporting its MSP Partners' and their clients' GDPR compliance efforts.

SuperOps legal basis for collecting and using the personal information described in our Privacy policy depends on the personal information we collect and the specific context in which we collect the information:

• SuperOps needs to perform a contract with you
• You have given SuperOps permission to do so
• Processing your personal information is in SuperOps legitimate interests
• SuperOps needs to comply with the law

SuperOps will retain your personal information only for as long as it is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal information we hold about you and if you want it to be removed from our systems, please contact us at contact@superops.com.

In certain circumstances, you have the following data protection rights:

• The right to access, update, or delete the information we have on you
• The right of rectification
• The right to object
• The right of restriction
• The right to data portability
• The right to withdraw consent

GDPR-ready features in SuperOps

How can I “forget” or delete a user’s personal data?

As per the GDPR guidelines, if a user decides to exercise their right to have their data deleted or to be “forgotten”, it should be complied with. To help you with such requests, SuperOps has built a Delete user' option. This permanently deletes all user and user-related information in the system. 

When the admin clicks the option ‘Delete user’, SuperOps displays a pop-up to confirm the action and to indicate that this action is irreversible. We also provide the admin with necessary information related to the action by providing a hyperlink directing the admin to detailed information in the help center. 

What if a ‘Requester’ wants to be “forgotten” or deleted?

• This action can be done only by the admin. 
• Go to the users' list page and select the respective user and click the option ‘Delete user’.
• A popup is shown to confirm the action and to indicate that this action is irreversible.
• Once the admin confirms the action and clicks Delete, the first step is to delete PII. This data is replaced with a tag — Deleted user'.

As a next step, we will check to see if the Requester was involved in any core activities such as approvals, change requests, etc. If there are no core activities all requester-related data will be permanently deleted. However, the core activities of the ‘Deleted user’ will be retained.

What if a ’Technician' wants to be “forgotten” or deleted?

• This action can be done only by the admin. 
• Go to the users' list page and select the respective user and click the option ‘Delete user’.
• A popup is shown to confirm the action and to indicate that this action is irreversible.
• Once the admin confirms the action and clicks Delete, the first step is to delete PII. This data is replaced with a tag — ‘Deleted user'.

Please note that none of the core activities such as ticket handling, script execution, will be deleted. 

To read more about our commitments under GDPR, please refer to the Privacy policy and Terms of use information.

You can also find more information at the following website: https://gdpr.eu/

Disclaimer: The information in this document may not be construed or used as legal advice about the content, interpretation, or application of any law, regulation, or regulatory guideline. Customers and prospective customers must seek their own legal counsel to understand the applicability of any law or regulation on the processing of their personal data.