Privacy Policy

Privacy Policy Content

Ermes B2B Privacy Policy

This Website collects some Personal Data from its Users.

This document can be printed for reference by using the print command in the settings of any browser.


Policy Summary

Personal Data processed for the following purposes and using the following services:

Advertising

  • NextRoll - Personal Data: device information; purchase history; Tracker; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); Usage Data
  • Facebook Lookalike Audience - Personal Data: Tracker; Usage Data

Analytics

  • Facebook Analytics for Apps - Personal Data: Tracker; Usage Data; various types of Data as specified in the service privacy policy
  • Google Analytics with anonymized IP and Facebook Ads conversion tracking (Facebook pixel) - Personal Data: Tracker; Usage Data
  • LinkedIn conversion tracking (LinkedIn Insight Tag) - Personal Data: device information; Tracker; Usage Data
  • Google Analytics Demographics and Interests reports - Personal Data: Tracker; unique device identifiers for advertising

Contacting the User

Mailing list or newsletter - Personal Data: email address; first name; last name; Tracker; Usage Data


Displaying Content from External Platforms

  • Font Awesome and Google Fonts - Personal Data: Tracker; Usage Data

Hosting and Backend Infrastructure

  • Amazon Web Services (AWS) and Microsoft Azure - Personal Data: various types of Data as specified in the service privacy policy

Remarketing and Behavioral Targeting

  • Facebook Remarketing and LinkedIn Website Retargeting - Personal Data: Tracker; Usage Data
  • Facebook Custom Audience - Personal Data: email address; Tracker

Tag Management

Google Tag Manager - Personal Data: Usage Data


User Database Management

HubSpot CRM - Personal Data: email address; first name; last name


Information on Opting Out of Interest-Based Advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.


Further Information about the Processing of Personal Data

Ermes For Enterprise and Ermes For SMEs

Ermes For Enterprise and Ermes for SMEs are business products commercialized through dedicated channels which are not connected by any means to this Website. For this, the personal data processing performed by Ermes For Enterprise and Ermes for SMEs are described in the corresponding Terms and Conditions and Privacy Policy documents. These are made available to the clients at the moment of the subscription.

Contact Information

Owner and Data Controller:

Ermes Cyber Security S.p.A.
Corso Bernardino Telesio, 29
10146 Torino

Owner contact email: info@ermes.company


Full Policy

Owner and Data Controller

Ermes Cyber Security S.p.A.
Corso Bernardino Telesio, 29
10146 Torino
Owner contact email: info@ermes.company


Types of Data Collected

Among the types of Personal Data that this Website collects, by itself or through third parties, there are: Usage Data; Tracker; email address; first name; last name; device information; purchase history; unique device identifiers for advertising.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website. Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services.

Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.


Mode and Place of Processing the Data

Methods of Processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated.

Place

Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own.

Retention Time

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users' consent.

Purposes of Processing

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Hosting and backend infrastructure, Analytics, Remarketing and behavioral targeting, Displaying content from external platforms, Tag Management, Contacting the User, Advertising and User database management.


Detailed Information on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Advertising

This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.

NextRoll (NextRoll, Inc.)

NextRoll is an advertising service provided by NextRoll, Inc. NextRoll, Inc. performs a hash of the User's email address in order to serve targeted advertising to other devices connected to them (i.e. cross-device tracking).

Personal Data processed: device information; purchase history; Tracker; unique device identifiers for advertising; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

Facebook Lookalike Audience (Facebook Ireland Ltd)

Facebook Lookalike Audience is an advertising and behavioral targeting service provided by Facebook Ireland Ltd that uses Data collected through Facebook Custom Audience in order to display ads to Users with similar behavior to Users who are already in a Custom Audience list on the base of their past use of this Website or engagement with relevant content across the Facebook apps and services.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Facebook Analytics for Apps (Facebook Ireland Ltd)

Facebook Analytics for Apps is an analytics service provided by Facebook Ireland Ltd.

Personal Data processed: Tracker; Usage Data; various types of Data as specified in the service privacy policy.

Place of processing: Ireland – Privacy Policy.

Google Analytics with anonymized IP (Google Ireland Limited)

Google Analytics is a web analysis service provided by Google Ireland Limited ("Google"). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

Facebook Ads conversion tracking (Facebook pixel) (Facebook Ireland Ltd)

Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Facebook Ireland Ltd that connects data from the Facebook advertising network with actions performed on this Website. The Facebook pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Audience Network.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy.

LinkedIn conversion tracking (LinkedIn Insight Tag) (LinkedIn Corporation)

LinkedIn conversion tracking (LinkedIn Insight Tag) is an analytics and behavioral targeting service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on this Website. The LinkedIn Insight Tag tracks conversions that can be attributed to LinkedIn ads and enables to target groups of Users on the base of their past use of this Website.

Personal Data processed: device information; Tracker; Usage Data.

Place of processing: United States – Privacy Policy.

Google Analytics Demographics and Interests reports (Google Ireland Limited)

Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for this Website.

Personal Data processed: Tracker; unique device identifiers for advertising.

Place of processing: Ireland – Privacy Policy – Opt Out.

Contacting the User

Mailing list or newsletter (this Website)

By registering on the mailing list or for the newsletter, the User's email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Website. Your email address might also be added to this list as a result of signing up to this Website or after making a purchase.

Personal Data processed: email address; first name; last name; Tracker; Usage Data.

Displaying Content from External Platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.

Font Awesome (Fonticons, Inc.)

Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows this Website to incorporate content of this kind on its pages.

Personal Data processed: Tracker; Usage Data.

Place of processing: United States – Privacy Policy.

Google Fonts (Google Ireland Limited)

Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy.

Hosting and Backend Infrastructure

This type of service has the purpose of hosting Data and files that enable this Website to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Website.

Amazon Web Services (AWS) (Amazon Web Services, Inc.)

Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Services, Inc.

Personal Data processed: various types of Data as specified in the service privacy policy.

Place of processing: Ireland – Privacy Policy.

Microsoft Azure (Microsoft Corporation)

Microsoft Azure is a hosting service provided by Microsoft Corporation.

Personal Data processed: various types of Data as specified in the service privacy policy.

Place of processing: Ireland – Privacy Policy.

Remarketing and Behavioral Targeting

This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User.

Facebook Remarketing (Facebook Ireland Ltd)

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that connects the activity of this Website with the Facebook advertising network.

Personal Data processed: Tracker; Usage Data.

Place of processing: Ireland – Privacy Policy – Opt Out.

LinkedIn Website Retargeting (LinkedIn Corporation)

LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation that connects the activity of this Website with the LinkedIn advertising network.

Personal Data processed: Tracker; Usage Data.

Place of processing: United States – Privacy Policy – Opt Out.

Facebook Custom Audience (Facebook Ireland Ltd)

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook Ireland Ltd that connects the activity of this Website with the Facebook advertising network.

Personal Data processed: email address; Tracker.

Place of processing: Ireland – Privacy Policy – Opt Out.

Tag Management

This type of service helps the Owner to manage the tags or scripts needed on this Website in a centralized fashion. This results in the Users' Data flowing through these services, potentially resulting in the retention of this Data.

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.

Personal Data processed: Usage Data.

Place of processing: Ireland – Privacy Policy.

User Database Management

This type of service allows the Owner to build user profiles by starting from an email address, a personal name, or other information that the User provides to this Website, as well as to track User activities through analytics features. This Personal Data may also be matched with publicly available information about the User (such as social networks' profiles) and used to build private profiles that the Owner can display and use for improving this Website.

HubSpot CRM (HubSpot, Inc.)

HubSpot CRM is a User database management service provided by HubSpot, Inc.

Personal Data processed: email address; first name; last name.

Place of processing: Germany – Privacy Policy.


User Rights under the GDPR

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to:

  • Withdraw their consent at any time;
  • Object to processing of their Data;
  • Access their Data;
  • Verify and seek rectification of their Data;
  • Request restriction of the processing of their Data;
  • Obtain erasure of their Personal Data;
  • Receive their Data and have it transferred to another controller;
  • Lodge a complaint before their competent data protection authority.

How to Exercise These Rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month, providing Users with the information required by law.

Additional Information

Legal Action: The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Website or the related Services.

System Logs and Maintenance: For operation and maintenance purposes, this Website and any third-party services may collect files that record interaction with this Website (System logs) or use other Personal Data (such as the IP Address) for this purpose.

Changes to This Privacy Policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Website and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Latest update: August 17, 2023

For information or specific requests, contact info@ermes.company.