Who we are
Deltatre Limited (Company number 04436986) of 6th Floor, 55 New Oxford Street, London, England, WC1A 1BS, which is part of Deltatre Group (hereinafter the “Company” or “Deltatre”), pays particular attention to the security and confidentiality of your Personal Data.
Which personal data may be collected?
The following categories of Personal Data relating to you may be collected (the term "Personal Data" shall mean all the categories listed below, considered as a whole):
Browsing data, including IP address
Your location — Information relating to the location from which you access the Help Center
Usage data — Data relating to your view and reading of the pages of the Help Center
Contact Data — Information relating to your name, surname, and e-mail address.
Cookie policy
We also collect certain information automatically using Cookies. See our Cookie policy.
How we collect your personal data
We collect and process your personal data in the following circumstances:
When you access the Help Centre, during the browsing session and when you use the Help Centre some data is automatically acquired.
When providing you access to private content in the Help Centre.
When you report to us any vulnerability or security issues.
For what purposese can your personal data be used
The processing of personal data must be justified by one of the legal bases established by existing data protection regulations, as described below.
Operational management and to monitor the use of the Help Center and improve it
We use the Document360 platform, which, through API endpoints, collects data relating to the view and reading of the Help Center pages. This data is processed in aggregate form, and does not involve the use of cookies on your device.
Legal basis for the processing: Legitimate interest of the Company to monitor and ameliorate its Help Center
The provision of data is obligatory to enable us to allow you to access the website, to use our services and to assist you; in the absence of the data, we will be unable to proceed.
To assess and patch and weakness and vulnerability in our systems and products
We consider the security of our systems and products as a priority in our business. Therefore, we encourage researchers across the globe to report to us any vulnerability or security issues they’ve discovered according to our Coordinated Vulnerability Disclosure.
In this case, Deltatre will process your contact data (name, surname, and email address) to receive and share information with you.
Legal basis for the processing: legal obligations, to which the Company must comply.
Compliance with legally binding requests by the legal authorities to discharge obligations of law, regulations or provisions
We collect your personal data to comply with legal obligations.
Legal basis for the processing: legal obligations, to which the Company must comply.
To defind or assert a right and/or legitimate interest of the Company
We may process some data to establish, exercise, or defend legal claims, protect its rights, or respond to legal disputes.
Legal basis for processing: legitimate interest.
To provide access to reserved areas
We may process your data to grant you access to reserved area of the Help Center.
Legal basis for processing: necessary for the performance of a contract.
How we keep your personal data safe
We have established a wide range of security measures to improve protection and keep the security, integrity and accessibility of your personal data.
All your personal data are stored on our secure servers (or on secure paper copies) or on those of our suppliers or commercial partners and may be accessed and used based on our standards and our security policies (or equivalent standards for our suppliers or commercial partners).
The security measures we have adopted include:
Severe restrictions on access to your personal data, based on necessity and solely for the purposes communicated;
Perimeter security systems to prevent unauthorized external access;
Permanent monitoring of access to IT systems to identify and stop the misuse of personal data;
Tracking of access to your personal data by internal personnel and verification of the related purpose;
Using encrypted means via Secure Socket Layer (SSL) technology for transactions on our website that require the entering of personal data.
Where we have provided you with (or you have chosen) a password to allow you to access our website, application or services, you are responsible for keeping this password secret and for complying with any other security procedure we inform you of. Please do not share your password with anyone.
How long do we store your information for
We will keep your personal data only for the length of time necessary to achieve the purposes for which they were collected or for any other related and lawful purpose. Therefore, if your personal data are processed for two different purposes, we will keep the data until the lengthier purpose is achieved. However, we will cease to process the personal data collected for the purpose whose retention period has expired.
When your personal data are no longer required, or when there is no longer any legal precondition for keeping them, they will be irreversibly anonymized (and in such a way may be stored) or securely destroyed.
The retention periods relating to the different purposes described above are indicated to follow:
Operational management and to monitor the use of the Help Center and improve it: data processed for these purposes may be kept for the duration of the contract and in any case no longer than the subsequent ten (10) years.
To access and patch any weakness and vulnerability in our systems and products: we will keep your data for the time necessary to manage and patch the vulnerability/issue discovered starting from the moment we became aware of it and, in any case, for a period not longer then two (2) years.
In case of a legal obligation: data will be retained for the period required by applicable law.
In the case of access to private content: we will keep your data for the time necessary to provide you with access to the private content.
Who we can share your personal data with
Your Data may be accessed by duly authorized employees and by external suppliers, appointed, if necessary, as data processors, who support us in providing services.
Your Data may also be accessed by other Group companies based inside and outside the European Union given the global approach of the Company.
Please contact us privacy@deltatre.com if you would like to see a list of the data processors or other entities to which we communicate data.
International transfer
As a globally active company, we may have to transfer your data to countries that do not belong to the European Union (EU) or the European Economic Area (EEA) (hereinafter the "Third Countries") in which the Company or other companies of the Group have their headquarters or operate.
Any transfer of personal data to Third Countries will be carried out according to applicable law. Where personal data are not transferred to Third Countries on the basis of an adequacy decision of the European Commission, standard contractual clauses approved by the European Commission will be adopted, possibly supplemented by additional measures, where necessary, to ensure that the level of protection is essentially equivalent to that guaranteed within the EU.
You can write to Deltatre, at any time, at the e-mail address privacy@deltatre.com, asking information about the entities that will receive your personal data and a copy of the safeguards adopted for the transfer.
On certain conditions, you are entitled to request:
Request the access to your personal data
Request a copy of the personal data you have provided to us (‘portability’)
Request the correction of your personal data
Request the deletion of any data for which the legal precondition for processing no longer exists
Request the restriction of the processing of your personal information
To revoke your consent, in any moment, in cases where the processing is based on consent
You have also the right to object to processing of your personal information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.
The objection to processing shall be sent to the following address: privacy@deltatre.com.
The exercising of the above rights is subject to certain exceptions that are intended to safeguard the public interest (e.g., the prevention or identification of crimes) and our interests (e.g., maintaining professional secrecy).
We will check that you are entitled to do so and will usually respond within one month.
We endeavor to respond to any complaints or reports concerning the methods used to process your data. Nevertheless, should you wish, you may forward your complaints or reports to the authority responsible for data protection using the following contact details https://ico.org.uk/global/contact-us/
Contacts
Should you have any questions regarding processing of Data, for any doubts, comments or for the exercise of the Data subjects rights the contact details of Deltatre, in its capacity as Data Controller, and the Data Protection Officer (DPO) are the following: privacy@deltate.com and dpo.uk@deltatre.com.