1. Introduction
IdentityStream is committed to protecting the privacy and security of personal data. This privacy policy outlines our practices for collection, use, and protection of personal data in accordance with the EU General Data Protection Regulation (GDPR).
2. Roles under GDPR
- As a Data Processor for our customers, we handle personal data as instructed by them, in accordance with GDPR requirements.
- As a Data Controller for our employees, users of IdS SignatureManager, and visitors to our website, we are responsible for the minimal data collected, such as through Google Analytics.
3. Data Collection and Use
- For Employees: We collect personal data necessary for employment and legal compliance. This data is used strictly for work-related purposes.
- For Website Visitors: If you consent to statistics cookies, we collect data through Google Analytics to understand how our website is used and to improve it. If you consent to marketing cookies, we use the marketing tools listed in section 4 to measure our campaigns and show relevant content on other platforms. Without your consent, only necessary cookies are used.
- For users of IdS SignatureManager: We collect usage data used for troubleshooting and improved user experience. We collect name, email address, and information about which device the add-in runs on. This data is not used for profiling or marketing purposes. Data is stored for 30 days.
4. Cookies
Necessary cookies are always used. Statistics and marketing cookies are only used if you consent. You can change or withdraw your consent at any time; withdrawing does not affect processing carried out before withdrawal.
| Cookie | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
ids_cookie_consent | IdentityStream | Stores your cookie choice (browser storage) | Until you change it | Necessary |
_ga, _ga_* | Distinguishes visitors and sessions for statistics | 2 years | Statistics |
5. Data Protection
We implement robust technical and organizational measures to protect personal data against unauthorized access, alteration, and loss, in accordance with GDPR requirements.
6. Data Subject Rights
Individuals whose data we process have the right to access, correct, delete, or transfer their data, as well as the right to object to or restrict processing, in accordance with GDPR.
7. Data Breach Notification
In the event of a data breach, we will immediately notify relevant supervisory authorities and affected data subjects, as required by GDPR.
8. Changes to Our Privacy Policy
This privacy policy may be updated periodically to reflect changes in our practices. The latest version will always be available upon request and will be published on our website.
9. Contact Information
For any questions or concerns regarding our privacy practices or GDPR compliance, please contact us at support@identitystream.com.