Below is the 3D Control Systems Data Handling Policy, which summarizes as to how your Data is being handled and the measures taken as to secure it.
3D Control Systems servers are hosted by data centers in USA, California.
System security
3D Control Systems uses firewalls and logical access control to protect our servers from unauthorized system access, allowing only trusted operations personnel to manage our systems. We also make sure to use strong configuration standards to harden our servers, and we keep them up-to-date with the latest security patches. As such data access is limited to explicitly authorized personnel only.
Application security
We support strong cryptography (SHA-256 with RSA encryption) for communication over public networks, so that your 3D Control Systems password and contents of your activity may be protected in transit as set forth below.
3D Control Systems also has rate limiting in place on UI and API calls to prevent brute force attacks. Password complexity requirements are enforced on 3D Control Systems password. We strive to only work with partners that are GDPR compliant and do our best to ensure that they adhere to the set regulations for data protection.
3D Control Systems passwords are cryptographically hashed before storing in our database. 3D Control Systems supports 2-factor authentication (2FA using Google Authenticator) when elected for customers who want to add an additional access control. In this case 3D Control Systems logins require an additional verification code, which is generated by Google Authenticator.
Use and Storage of Customer Data
In our system customer data is collected with 3 purposes:
1. To guarantee execution of all system services and keep security of users : email, IP-address. This data is obligatory, so user can’t revoke his consent to process it.
2. To provide social services and users interaction. All the data from public pages, IP address used in order to determine user’s location in our map of users and email, name, lastname, organization, specialization, avatar, wallpaper, mobile phone, address(country, city, address, some info about yourself, as data needed to cover users interactions). User can revoke his consent on its processing.
3. To expand our services and customers base - data we collect from pre-registration form : country, institution name, type of institution, role, company, industry, department, organization, main 3D Printer. User can revoke his consent on its processing.
We share your personal data only in order to provide you the best experience and only in next cases:
- Your email and first name to make conversation with our support easier with Intercom.
- Your email, first name and last name to notify you about your activities throughout the system with Mandrill Mailer.
- Your email to notify you about our news with Mailchimp.
- Your IP address with Google analytics in order to analyze your activities and provide the best services in the world.
We will not share your personal data for marketing purposes with companies outside. All customer data is handled as confidential and sensitive information and is only accessed by limited number of people from 3D Control Systems team.
The data is accessed and used only in cases of:
- 3D Control Systems software that aggregate data to calculate statistics and analytics
- Customer support to the extent required to solve the case
- To ensure the compliance with applicable laws and regulations, including data storage demands as set forth by US and EU regulations
- Accessed by third parties only as far as is needed to sustain service functionality and stored by third parties as demanded by law
