Privacy policy

Responsible person

The protection of your privacy and your personal rights is important to us. You can rely on transparent and fair data processing, and we handle your data carefully and responsibly. This information explains how we use your personal data, in line with the UK Data Protection Act 2018 and the requirements of the General Data Protection Regulation (GDPR).

Scope of the processing of personal data

As a matter of principle, we only collect and use personal data from you insofar as this is necessary to provide a functional website and our content and services. The collection and use of your personal data regularly only takes place with your consent. An exception applies in cases where prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

The security of your personal data is a high priority. We protect the data stored with us using technical and organisational measures in order to effectively prevent loss or misuse by third parties. Our employees who process personal data are bound to data secrecy. To protect your personal data it is transmitted in encrypted form — for example we use SSL (Secure Socket Layer) for communication via your internet browser, which you can recognise by the lock symbol your browser displays.

Our technical security measures are checked regularly and, where necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and in accordance with our instructions.

Purposes of processing and legal basis

We collect, process and use your personal data for the following purposes:

• Establishment and performance of contractual relationships
• Marketing measures to business contacts (see Marketing to business contacts)
• Customer satisfaction surveys and analyses
• Service evaluations
• Customer service and customer support

The processing of your personal data may be based on the following legal grounds:

Marketing to business contacts

We market only to business contacts— people acting in a professional capacity at organisations that have approached us. We do not market to individuals in a personal capacity, and we do not buy marketing lists.

Our lawful basis

Where you complete an enquiry form on this website, we rely on legitimate interests under Article 6(1)(f) of the UK GDPR to answer your enquiry and to follow up on the matter you raised. Our interest is in responding to organisations that have contacted us about our services; your interest is in receiving a considered answer to the question you asked.

We also present an optional opt-in checkbox on our enquiry forms. It is never ticked by default, it is never required, and your enquiry is answered whether or not you tick it. Where you do tick it, your consent under Article 6(1)(a) is the lawful basis for sending you our periodic updates — and that consent, rather than legitimate interests, is what we rely on for those communications.

We do not use legitimate interests to send marketing unrelated to your enquiry to people who have not opted in. We record your choice, with the date it was made, so that the position at the point of collection is clear.

Your right to object

You have an absolute right to object to processing based on legitimate interests for direct marketing purposes. If you object, we will stop — without asking you to justify the request. Every marketing message we send carries a one-click unsubscribe that takes effect immediately. You may also object at any time by writing to Privacy@datanomytechnologies.com.

Where you have given consent, you may withdraw it at any time, just as easily as you gave it, and without detriment.

Enquiry forms and spam protection

The enquiry form on our contact page is delivered by HubSpot, which acts as our processor. The details you enter are transmitted to and stored in HubSpot’s systems so that we can respond to you, and are handled under our instructions and a data processing agreement. HubSpot’s own handling of data is described in the HubSpot privacy policy.

Google reCAPTCHA

To protect the form from automated abuse we use Google reCAPTCHA. When you open the contact page, reCAPTCHA collects and analyses your IP addressand information about how you interact with the page — such as mouse movement, keystroke timing and time spent on the page — in order to determine whether you are a person or a bot. This analysis begins automatically when the page loads, because the form cannot accept a submission without it.

We rely on our legitimate interests for this processing: without it the form would be exposed to automated abuse, which would disrupt our ability to answer genuine enquiries and could compromise the security of our systems. The data is used for security purposes only. It is not used to build an advertising profile of you, and we do not receive it ourselves.

The information is processed by Google, which may transfer it outside the UK under appropriate safeguards. Google’s use of the data is governed by the Google privacy policy and terms of service.

Duration of storage and routine deletion

We process and store your personal data only for the period of time required to fulfil the purpose of storage, or as provided for in laws or regulations. After the purpose has ceased to exist or has been fulfilled, your personal data will be deleted or blocked.

In the case of blocking, deletion will take place as soon as legal, statutory or contractual retention periods do not conflict with this, there is no reason to assume that deletion would impair your interests worthy of protection, and deletion would not cause disproportionately high expense due to the special nature of the storage.

Collection of general data and information (log files)

If you visit our website for information purposes only, without providing personal data via registration or in any other way, only the internet connection data that your browser transmits to our server will be processed. A log file is created in the course of an automatic protocol of the processing computer system. The following can be recorded:

• Access to the website (date, time and frequency)
• How you arrived at the website (previous page, hyperlink and similar)
• Amount of data sent
• Which browser and browser version you are using
• The operating system you are using
• Which internet service provider you use
• Your IP address, which your internet access provider assigns to your computer when you connect to the internet

The legal basis for this processing is our legitimate interest, as the collection and storage of this data is necessary for the operation of the website, to ensure its functionality and to deliver our content correctly.

In addition, the data serves to optimise our website and to ensure the security of our IT systems, and the processing is based in this respect on our vital interest. For this reason the data is stored for a maximum of seven days as a technical precaution.

We also use this data for the purposes of advertising, market research and to design our services to meet your needs, by creating and evaluating user profiles under pseudonyms — but only if you have not exercised your right to object to this use of your data.

Contacting us

When you contact us by email or via a contact form, the data you provide will be stored by us in order to fulfil a pre-contractual or contractual arrangement, insofar as it is necessary to answer your questions. The contact is logged in order to be able to prove the contact in accordance with legal requirements. We delete the data accruing in this context when the respective conversation with you has ended and the facts concerned have been conclusively clarified.

Based on our legal obligations and our legitimate interest, we use and store your personal data and technical information to the extent necessary to prevent or prosecute misuse or other illegal behaviour on our website — for example to maintain data security in the event of attacks on our IT systems. This also takes place insofar as we are legally obliged to do so, and for the exercise of our rights and claims as well as for legal defence.

Disclosure of personal data to third parties

Your personal data will only be passed on if there is a legal obligation to do so, or to service providers and partner companies that have been carefully selected in advance and are contractually obliged to comply with the requirements of data protection law.

Disclosure to service providers

For the operation and optimisation of our website and our services, and for the processing of contracts, various service companies work for us — for example for central IT services or the hosting of our website, and for the payment and delivery of services — to whom we pass on the data required for the fulfilment of the task (such as name and address). Some of these companies act for us by way of commissioned processing and may therefore use the data provided exclusively in accordance with our instructions. In this case we are legally responsible for appropriate data protection precautions at the companies we commission; we agree specific data security measures with them and monitor these regularly.

Disclosure to other third parties

We will disclose your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so — for example due to official or court orders — or if we are entitled to do so, because it is necessary for the prosecution of criminal offences or for the exercise and enforcement of our rights and claims.

Data transfer to third countries

If we use service providers in third countries, we take additional measures to ensure an adequate level of data protection for the transfer of personal data, and thus ensure that the transfer is generally permissible and that the special requirements for a transfer to a third country are met — for example by concluding standard contracts and additional guarantees, and supplementary technical and organisational measures such as encryption or anonymisation.

Your data subject rights

You have a number of data subject rights. There is more information on each right on the Information Commissioner's Office (ICO) website.

Where the processing of your personal information is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us.

The above rights may be limited in some circumstances — for example if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.

We encourage you to get in touch if you have any concerns with how we collect or use your personal information. You also have the right to lodge a complaint directly with the ICO; their contact details can be found on their website. Please direct all requests for information and objections to data processing to us.

Hosting and content delivery networks

This website is hosted by our external service providers GoDaddy and WordPress. The personal data collected on this website is stored on their servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via a website.

These providers are used for the purpose of fulfilling the contract with our potential and existing visitors and users, and in the interest of a secure, fast and efficient provision of our online offer by a professional provider. They will only process your data to the extent necessary to fulfil their service obligations, and will follow our instructions regarding this data.

Cookies

Cookies are small pieces of data, stored in text files, that are placed on your computer or other device when websites are loaded in a browser. They are widely used to remember you and your preferences, either for a single visit (through a session cookie) or for multiple repeat visits (using a persistent cookie). They ensure a consistent and efficient experience for visitors and perform essential functions such as allowing users to register and remain logged in. Cookies may be set by the site you are visiting (first party cookies) or by third parties, such as those who serve content or provide advertising or analytics services (third party cookies).

We use cookies for a number of different purposes. Some are necessary for technical reasons; some enable a personalised experience; and some allow the display of advertising from selected third-party networks. Some of these cookies may be set when a page is loaded, or when a visitor takes a particular action.

For more detail, see our cookies policy.

Browser settings

If you wish to withdraw your consent to our use of cookies on this site, or if you wish to delete or control the placing of cookies on your computer, you can change your browser settings to block cookies or to alert you when cookies are being sent to your device. Please refer to your browser instructions or help screen to learn more about how to adjust your settings: Microsoft Edge, Chrome, Firefox, Safari.

If you disable the cookies that the site uses, this may impact your experience while on the site. You can also delete cookies already stored on your computer; again, doing this may have a negative impact on the usability of many websites.

Changes to this policy

In order to ensure that our data protection information always complies with current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection information has to be adapted due to new or revised offers or services.