Effective Date: March 1st, 2020

This Privacy Policy describes devsec.si practices regarding the collection, use, and disclosure of the information we collect from and about you when you use DevSec.si website that links to this Policy (the “Services”). By accessing or using the Services, you agree to this Privacy Policy.

We follow the following principles in order to protect your privacy:
we do not collect more information than is necessary;
we do not use your data for purposes other than those specified;
we do not keep your data if it is no longer needed;
we do not farm your data out to third parties.

IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICES.

This Privacy Policy contains the following sections:

• The Information We Collect
• How We Use Your Information
• Children’s Privacy
• Your Rights
• How Long We Store Your Information
• Changes to Our Privacy Policy
• How We Protect Your Information

THE INFORMATION WE COLLECT

devsec.si (sometimes referred as “we”, the “Site”) collects a variety of information that you provide directly to us. We process your information when necessary to provide you with the Services that you have requested or where we have obtained your prior consent, or where we have a legitimate interest to do so. For example, we may have a legitimate interest to process your information for security, testing, maintenance, and enhancement purposes of the Services we provide to you, or for analytics, research, and reporting purposes. Without your information, we cannot provide you with the Services you have requested or you may be limited in your use of the Services.

Information You Provide to Us

Devsec.si collects information from you through:

• Visiting our website
• The devsec.si Services that you use
• Requests or questions you submit to us via forms or email
• Your communications and dealings with us
• Requests for customer support and technical assistance

Information from and about you. The types of information we collect will depend upon the Services you use, how you use them, and what you choose to provide. The types of data we collect directly from you may include: – Name, address, telephone number, email address, and other information that can be related to your usage of Services.

Payment Information. If you are a user of our Services, we will utilize wire transfer to collect payment information, including your bank account number, routing or SWIFT/BIC, billing address, and potentially phone number for any verification that third-party demands. The third-party service provider, and not DevSec Group, store your payment information on our behalf.

Information We Automatically Collect

devsec.si and our service providers (which are third-party companies that work on our behalf to provide and enhance the Services) use a variety of technologies, including cookies and similar tools, to assist in collecting this information.

Log Files. When you use the Services, our servers automatically record certain information in server logs. These server logs may include information such as your web request, Internet Protocol (“IP”) address, browser type and settings, referring / exit pages and URLs, a number of clicks and how you interact with links on the Services, metadata associated with uploaded Content, domain names, landing pages, pages viewed, mobile carrier, date and time stamp information and other such information.

Wordfence
Cookies set by the Wordfence Security plugin are used to protect the site against malicious attacks. Wordfence only uses data about your visit and does not store personally identifiable information and therefore does not require user consent. Read Wordfence’s privacy policy.

Google Analytics. We are using Google Analytics Services by Google which utilize ‘Cookies’ in order to improve our service, and user experience and analyze how the website is used. Cookies are small files or other pieces of data which are downloaded or stored on your computer or another device, that can be tied to information about your use of our website (including certain third party services and features offered as part of our website). Aside from the approximate location (IP address), the information collected by Google Analytics is mostly anonymous traffic data including browser information, device information, and language, it may also help us to improve our service for you.

The collected information is used to provide an overview of how people are accessing and using devsec.si website. It is not used for any additional purpose, such as to profile those who access our website. If you wish to opt-out Google Analytics tracking, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

CloudFlare. We use CloudFlare in order to improve security both of our site and our user’s security. For that reason, CloudFlare sets a cookie in order to identify trusted web traffic.

HOW WE USE YOUR INFORMATION

We use your information (including any information that we collect, as described in this Privacy Policy) for various purposes depending on the types of information we have collected from and about you and the specific Devsec.si you use, including to:

• Complete a purchase or provide the services you have requested
• Respond to your request for information and provide you with more effective and efficient customer service
• Provide you with product updates and information about products you have purchased from us
• Provide you with service notifications via email and within the Services based on your notification selections
• Contact you by email, postal mail, or phone regarding our Services and third-party products, services, surveys, research studies, promotions, special events and other subjects that we think may be of interest to you
• Customize the advertising and content you see
• Help us better understand your interests and needs, and improve the Services
• Synthesize and derive insights from your use of different DevSec Group products and services
• Engage in analysis, research, and reports regarding the use of our Services
• Provide, manage, and improve the Services
• Protect our Services and our users
• Understand and resolve app crashes and other issues being reported

HOW WE SHARE YOUR INFORMATION

Devsec.si will share your information in the following ways:

• Service Providers. We may provide access to or share your information with select third parties who perform services on our behalf. These third parties provide a variety of services to us, including without limitation billing, sales, marketing, provision of content and features, advertising, analytics, research, customer service, shipping and fulfillment, data storage, security, fraud prevention, payment processing, and legal services.
• Third-Party Integrations. When you initiate a connection with a third-party integration through the Services, we will share information about you that is required to enable your use of the third-party integration through the Services.

CHILDREN’S PRIVACY

The Services are intended for general audiences and not for children under the age of 13. If we become aware that we have collected personal information (as defined by the Children’s Online Privacy Protection Act) from children under the age of 13, we will take reasonable steps to delete it as soon as practicable.

YOUR RIGHTS

If you want to learn more about the information collected through the Services, or if you would like to access or rectify your information and/or request deletion of information we collect about you, or restrict or object to the processing of your information, please contact us using the contact information below. Where you have provided consent, you may withdraw your consent at any time, without affecting the lawfulness of the processing that was carried out prior to withdrawing your consent. If you are dissatisfied with the way we process your information, you may lodge a complaint with the data protection authority (“DPA”) in your jurisdiction.

HOW LONG WE STORE YOUR INFORMATION

We will retain your information for the period necessary to fulfill the purposes outlined in this Policy unless a longer retention period is required or permitted by law.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to amend this Policy at any time to reflect changes in the law, our data collection, and use practices, the features of our Services, or advances in technology. We will make the revised Policy accessible through the Services, so you should review the Policy periodically. If we make a material change to the Policy, you will be provided with appropriate notice and we will seek your consent to the updated Policy in accordance with legal requirements.

HOW WE PROTECT YOUR INFORMATION

Devsec.si takes technical and organizational measures to protect your personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, or access. We care to ensure the security of personal data.

When we reply to emails, they are encrypted using SSL and/or TLS, this means that all emails sent by us are secure and protected from interception, emails received by us are the responsibility of the sender to ensure appropriate security measures are in place to protect its contents.

In the event of a data breach or data loss, we will notify you within 72 hours of the breach.
If you have any questions about security on our Services, you can contact us at office [ at ] devsec.si

Linked sites. For your convenience, some hyperlinks may be posted on the Site that links to other websites, not under the control of the Company.  Please note that this Privacy Policy applies only to our Site and not to other websites of other organizations to which we link. We are not responsible for the privacy policies or practices of any other third-party sites. You should make your own inquiries regarding them. In addition, when you initiate a transaction on a website that our Site links to, even if you reached that site through our Site, the information that you submit to complete that transaction becomes subject to the privacy practices of the owner of that linked site. You should read their privacy policies to understand how they use and protect the personal information that they collect.  The Company is not responsible for the privacy or information practices of its suppliers or any third-party websites.