Data Privacy Policy

General information

ForeNova Privacy and Cookie Statement

Last updated: July 30, 2024

 

ForeNova Technologies GmbH (hereinafter: ForeNova) offers 24/7 cybersecurity services. As part of the services we offer, we process personal data. This privacy statement tells you what personal data we process from you and what we do with your personal data.

 

Our privacy and cookie statement at a glance

Your privacy is of great importance to us. We therefore comply with the General Data Protection Regulation (hereinafter: GDPR). This means that we:

 

  • Clearly specify our purposes before we process personal data, by using this privacy and cookie policy.
  • Limit our collection of personal data to only the personal data needed for legitimate purposes.
  • Ask for explicit permission to process your personal data in cases where your permission is required.
  • Take appropriate security measures to protect your personal data and we demand the same from parties who process personal data on our behalf.
  • Respect your right to access, correct or delete your personal data held by us.

 

In this privacy and cookie statement, we will explain which personal data we collect and for which purposes.

 

For what purposes do we use your personal data?

We obtain various personal data from you. For each purpose we specify what data we obtain from you, for what purpose we process this data and for how long we store your data. If you have any questions or would like to know exactly what information we store about you, please contact us. Our contact details are mentioned at the bottom of this privacy statement.

 

Contact

When you send us an e-mail, fill in the contact form on the website, contact us by telephone, or contact us in any other way, we process your personal data.

 

For this purpose, we process the following personal data:

 

  • Name
  • Business information (if you contact us from a business perspective)
  • E-mail address
  • Telephone number
  • Any other information you provide as part of the content of a message

 

We store these contact moments with the personal data you provide based on your consent. We keep this information for as long as necessary for this contact or up to two years after we last had contact with you, because we want to make sure we have handled your question or complaint properly.

 

Requesting a demo

On our site you can request a demo of our platform. In this demo we will show you how our platform works. When you request a demo we process the following information:

 

  • First and last name (optional)
  • Company name (optional)
  • Country (optional)
  • Title / role (optional)
  • E-mail address
  • Phone number (optional)

We process this information so we can execute the agreement we have to show you our product. We store this information up to two years after our demo.

 

Receiving a Free Trial

On our website, you can also request a free trial, so you can experience our products yourself. To give you access to our portal, we process the following data:

 

  • First and last name
  • Company name
  • Email address
  • Phone number (optional)
  • Username and password

 

We process this information so we can execute the agreement we have to show you our product. We store this information up to two years after your trial period. If you decide to become a client, we use the information you gave us for your trial to create a client account.

 

Becoming a client

Once you become a client we create a personalized portal for you, where you can find information about your website and incidents we detected. We process the following data when you become a client:

 

  • First and last name
  • Company name
  • Email address
  • Phone number
  • Username and password
  • Payment details

 

We process this data so we can execute our agreement with you. We save this information for up to two years after all our agreements have ended. Certain types of personal data will be retained for a longer period with regards to the applicable legal tax retention.

 

Becoming a ForeNova partner

If you are working as a professional in the cybersecurity field, you can apply for our ForeNova partner program. For our ForeNova partner program we process the following data:

 

  • First and last name of people involved in the partner program
  • Company name
  • Email address
  • Phone number (optional)
  • Username and password

 

We process this data so we can execute our agreement with you. We save this information for up to two years after your participation to the partner program has ended. Certain types of personal data will be retained for a longer period with regards to the applicable legal tax retention.

 

Providing data to third parties

We share your personal data with third parties only when permitted by current law. We may provide your personal data to third parties because:

 

  • we have engaged them to process certain data
  • it is necessary to execute the agreement with you
  • you give permission for this
  • we have a legitimate interest in doing so; or
  • we are legally obliged to do so (for example, if the police require this in case of suspicion of a crime).

 

To deliver the services we mentioned above, we share your data with:

 

Name

Reason for sharing

Country

Salesforce (SFDC Ireland Ltd.)

Customer relationship management

Ireland

Hubspot (Hubspot Inc.)

Marketing automation and website hosting

USA

Google Ireland Ltd.

Google Addwords service

Ireland

Microsoft Inc

Office productivity including email communications and cloud file sharing

USA

 

We may use parties based in a country outside the European Economic Area (EEA) to provide our services. We only use such a party if:

 

  1. This recipient is located in a third country that the European Commission has designated as providing an adequate level of data protection (an adequacy decision). Or,
  2. The recipient of the personal data provides appropriate safeguards (e.g. through EU standard contractual clauses). Or,
  3. We have obtained your express consent to do so.

 

Cookies
Our company makes use of cookies and device fingerprinting. Cookies are small files in which we can store information, so that you do not have to fill in that information again. We can also use them to see whether you are visiting us again. We, and third parties, use cookies to:

 

  • make sure you can use our website (technical and functional cookies);
  • analyze your use of our website to make our website more user friendly based on that information (analytical cookies);
  • show you personalized ads (marketing cookies).

 

These cookies collect the following information:

 

  • IP-address
  • cookie-ID
  • website and click behavior
  • Referrer-URL

 

The first time you visit our website, we will show you a notification explaining our cookies and ask for your permission for the use of these cookies.

 

Below, you find a summary of the cookies we use and what we use them for:

 

Name

Provider

Purpose

Expiration

Function

_cf_bm

Cloudflare, Inc.

Bot Management. To identify and mitigate automated traffic.

30 minutes

Strictly necessary

_cfruid

Cloudflare, Inc.

Bot detection. Rate limiting rules for performance and security services.

Expires with active session

Strictly necessary

_cfuvid

Cloudflare, Inc.

Rate limiting rules for performance and security services.

Expires with active session

Strictly necessary

_ga

Google Ireland, Ltd.

Google Analytics GA4. To collect information and usage statistics

24 months

Analytics

_ga_<container id>

Google Ireland, Ltd.

Google Analytics GA4. To identify unique visitors.

24 months

Analytics

_gat_<container id>

Google Ireland, Ltd.

Google Tag Manager. To collect and organize page usage information.

10 minutes

Analytics

_gcl_au

Google Ireland, Ltd.

Google Conversion Linker. To attribute conversions from external landing pages.

Persistent

Advertising

_gid

Google Ireland, Ltd.

Google Analytics GA4. To store and count pageviews.

1 day

Analytics

__hs_cookie_cat_pref

HubSpot, Inc.

To record the categories a visitor consented to.

6 months

Functional

_hssc

HubSpot, Inc.

To track active sessions.

30 minutes

Functional

_hssrc

HubSpot, Inc.

To determine if the visitor has restarted their browser.

Expires with active session

Functional

_hstc

HubSpot, Inc.

Main cookie to track visitors.

6 months

Functional

hs_c2l

HubSpot, Inc.

Hubspot authentication.

6 months

Functional

hubspotutk

HubSpot, Inc.

To track visitor's identity with a form submission.

6 months

Functional

_fbp

Meta Platforms Ireland, Ltd.

Facebook Meta pixel. To store and track visits across websites.

3 months

Advertising

 

 

If you want to know how these parties process your personal data, you can read their Privacy policy on their websites. Although we are very selective about the websites to which we refer, we cannot guarantee their content and functioning. We do not provide any guarantees and are not liable for any damage resulting from access to or use of these websites.

 

Enabling and disabling cookies

You can set your web browser to accept the storage of cookies only if you agree. Please consult your browser manual for more information. Please note that many websites do not work optimally when cookies are disabled.

 

Deleting cookies

Most cookies have an expiration date. If an expiration date is set, the cookie is automatically deleted when the expiration date expires. You can also choose to delete cookies manually before the expiration date. Please consult your browser manual to do so.

 

Statistics

We use Google Analytics to track how users use the website. The information thus obtained, including the IP address of your computer, is transmitted to Google and stored by Google on servers in the EER and the United States.

 

Google uses this information to track how our website is used, to provide us with reports about the website and to provide its advertisers with information about the effectiveness of their campaigns. Google may provide this information to third parties if Google is legally required to do so, or when these third parties process the information on Google's behalf. We have no influence on this, but you can read how Google processes personal data in their privacy statement.

 

Social media buttons  

On our website we use social media buttons, which redirect you to the social media platforms. This gives you the option to follow us and share content within the network. You will also see advertisements on your social media page. The buttons are active because of bits of code that come from the social media networks. If you want to know what the social media platforms do with your personal data, please read the relevant privacy policy:  

 

 

Security
We take security measures to reduce misuse of, and unauthorized access to, personal data. We take responsibility in the security of your personal data. We renew our security measures to ensure safe storage of personal data and keep track of what might go wrong.

 

Your Rights

If you have questions or want to know what personal data we hold about you, you can always contact us. Please see the contact information below.

 

You have the following rights:

 

Right of access: You have the right to see the personal data we process about you.

Right to rectification: You have the right to correct or supplement the personal data we process about you if it is incorrect or incomplete.

Right to object: You can object to the processing of your personal data and to direct marketing.

Right to erasure: You can request us to erase your personal data.

Right to withdraw consent: if you have given us consent to process personal data, you may withdraw this consent at any time.

Right to data portability: if it is technically possible, you have the right to have the personal data we process about you transferred to a third party.

Right to restriction of processing: in some cases, you can request us to restrict (temporarily or otherwise) the processing of your personal data.

 

Please ensure that you always clearly indicate who you are, so that we can be sure that we are not modifying or deleting data of the wrong person.

 

In principle, we will comply with your request within one month. However, this deadline may be extended by up to two months for reasons related to the specific rights of data subjects or the complexity of the request. If we extend this deadline, we will notify you in a timely manner.

 

Filing a complaint

If you feel that we are not helping you in the right way, you can let us know by sending an email to privacy@forenova.com.

You also have the right to file a complaint with the supervising authority. For the Netherlands, this is the Autoriteit Persoonsgegevens.

 

Changes to this privacy and cookie statement 

We reserve the right to modify this statement. Changes will be published on this website. It is recommended to consult this statement regularly, so that you remain informed of any changes. 

 

Contact

If you have any questions about how we process your personal data, you can send us an email at privacy@forenova.com.

 

ForeNova Technologies GmbH
Sulzbacher Str. 48
90489 Nürnberg

+49 1512 962 5343



 

 

Tap into expert insights & best practices

ForeNova’s experts share valuable insights, best practices, customer challenges and industry trends. Learn from security practitioners and thought leaders on how to best protect your business from new and persistent cyber threats.

Managed Detection & Response for Healthcare Providers in Germany, Becoming a Priority

Read more…

TISAX Requirements Checklist For German Automotive Suppliers

Read more…

What is Access Control List (ACL)?

Read more…