-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathprivacy-policy.html
284 lines (240 loc) · 19 KB
/
privacy-policy.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
<!-- last_modified_at: --><!DOCTYPE html>
<html lang="en" data-appurl='https://fqa.test.signpath.io'>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="canonical" href='https://signpath.github.io/website-staging//privacy-policy' />
<!-- Begin Jekyll SEO tag v2.6.1 -->
<link rel='preload' as='style' href='/assets/css/line-awesome.min.css' onload="this.rel='stylesheet'">
<title>Privacy Policy | SignPath</title>
<meta property="og:title" content="Privacy Policy | SignPath" />
<meta property="og:locale" content="en_US" />
<meta property="og:description" content="SignPath privacy policy" />
<meta property="og:url" content="https://signpath.github.io/website-staging//privacy-policy" />
<meta property="og:site_name" content="SignPath.io" />
<meta name="description" content="SignPath privacy policy"/>
<!-- End Jekyll SEO tag -->
<link rel='stylesheet' href='/assets/css/hint.min.css'>
<link rel="stylesheet" href="/assets/css/index.css?cache=2024-12-18">
<link rel="alternate" type="application/atom+xml" title="SignPath.io Blog" href="/feed.xml">
<script src='/assets/index.js?cache=2024-12-18'></script>
<script src='/assets/js/main-bundle.js?cache=2024-08-05'></script><link rel="icon" href="/assets/favicon-50x50.png" sizes="32x32">
<link rel="icon" href="/assets/favicon.png" sizes="192x192">
<link rel="apple-touch-icon-precomposed" href="/assets/favicon.png">
<meta name="msapplication-TileImage" content="/assets/favicon.png">
</head>
<body>
<header>
<div>
<a href='/'><img src='/assets/signpath-logo-white.svg' width="181" height="36" alt='SignPath'></a>
<nav>
<ul><li>
<a href='/product'> Product </a>
<ul><li> <a href='/product/features'> Features </a> </li><li> <a href='/product/editions'> Editions </a> </li><li class='separator' /><li> <a href='/product/devops'> For DevOps teams </a> </li><li> <a href='/product/infosec'> For InfoSec teams </a> </li><li> <a href='/product/open-source'> For Open Source projects </a> </li><li class='separator' /><li> <a href='/product/office-macros'> Office macro signing </a> </li><li> <a href='/product/thales-dpod'> Thales DPoD Cloud HSM </a> </li><li> <a href='/product/pkic-best-practices'> PKI Consortium best practices </a> </li></ul>
</li><li>
<a href='/code-signing'> Code Signing </a>
<ul><li> <a href='/code-signing/introduction'> Introduction </a> </li><li> <a href='/code-signing/theory'> Theory </a> </li><li> <a href='/code-signing/windows-platform'> Windows Platform </a> </li><li> <a href='/code-signing/test-certificates'> Managing Test Certificates </a> </li><li> <a href='/code-signing/private-keys'> Storage of Private Keys </a> </li><li> <a href='/code-signing/media-coverage'> Media Coverage </a> </li></ul>
</li><li>
<a href='/documentation'> Documentation </a>
<ul><li> <a href='/documentation/getting-started'> Getting Started </a> </li><li> <a href='/documentation/managing-certificates'> Managing Certificates </a> </li><li> <a href='/documentation/users'> Managing Users </a> </li><li> <a href='/documentation/projects'> Setting up Projects </a> </li><li> <a href='/documentation/signing-code'> Signing Code </a> </li><li> <a href='/documentation/signing-containers'> Signing Container Images </a> </li><li class='separator' /><li> <a href='/documentation/artifact-configuration'> Artifact Configuration </a> </li><li> <a href='/documentation/build-system-integration'> Build System Integration </a> </li><li> <a href='/documentation/trusted-build-systems'> Trusted Build Systems </a> </li><li> <a href='/documentation/origin-verification'> Origin Verification </a> </li><li class='separator' /><li> <a href='/documentation/powershell'> PowerShell cmdlets </a> </li><li> <a href='/documentation/crypto-providers'> Crypto Providers </a> </li><li class='separator' /><li> <a href='/documentation/changelog'> Product updates </a> </li></ul>
</li><li>
<a href='/about-us'> About us </a>
<ul><li> <a href='/company'> Company </a> </li><li> <a href='/team'> Team </a> </li><li> <a href='/blog'> Blog </a> </li><li> <a href='/jobs'> Jobs </a> </li><li> <a href='/support'> Support </a> </li><li> <a href='/contact'> Contact </a> </li></ul>
</li><li class='search'>
<div>
<div>
<form method="get" target="_self" action="/search">
<input type='search' name='q' placeholder="Search SignPath.io" />
</form>
</div>
</div>
<span tabindex='0'>
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><path d="M 19 3 C 13.488281 3 9 7.488281 9 13 C 9 15.394531 9.839844 17.589844 11.25 19.3125 L 3.28125 27.28125 L 4.71875 28.71875 L 12.6875 20.75 C 14.410156 22.160156 16.605469 23 19 23 C 24.511719 23 29 18.511719 29 13 C 29 7.488281 24.511719 3 19 3 Z M 19 5 C 23.429688 5 27 8.570313 27 13 C 27 17.429688 23.429688 21 19 21 C 14.570313 21 11 17.429688 11 13 C 11 8.570313 14.570313 5 19 5 Z"/></svg>
</span>
</li>
<li class='login'><a class='btn btn-flat' href='https://fqa.test.signpath.io/Web/Home/Login'>Login</a>
<li class='login'><a href='https://fqa.test.signpath.io/Web/Subscription/StartFreeTrial' class='btn btn-primary trial'>Start free trial</a></li>
</li>
</ul>
<a id='main-menu-toggle' href='#' onclick='document.querySelector("header > div > nav > ul").classList.toggle("open")'>
<div></div>
<div></div>
<div></div>
</a>
</nav>
</div>
</header>
<main>
<section class="bg-black font-white top-section">
<div>
<h1>Privacy Policy</h1>
</div>
</section>
<section class="default-section">
<div>
<article>
<p>We consider your privacy and the security of your personal data of great importance. This Privacy Policy applies to the data we process when you use SignPath as well as to the data of our website visitors and informs you about the personal data we collect and how we process it.</p>
<h1 id="who-is-responsible-for-the-processing-of-your-personal-data">Who is responsible for the processing of your personal data?</h1>
<p>When you visit our website, your data is processed by:</p>
<p>SignPath GmbH <br />
Gonzagagasse 11/23 <br />
1010 Vienna <br />
AUSTRIA <br />
[email protected] <br />
Commercial register ID: 475506z</p>
<h1 id="data-protection-officer">Data protection officer</h1>
<p>You can reach our data protection officer at [email protected].</p>
<h1 id="data-we-process-when-you-use-signpath">Data we process when you use SignPath</h1>
<h2 id="registration-data">Registration Data</h2>
<p>If you create a SignPath account, you are required to provide us with some basic information:</p>
<ul>
<li>Your name</li>
<li>Your business email address</li>
<li>Your job title (only for administrators)</li>
</ul>
<p>This data is only processed because it is necessary for the performance of the contract between you and us. After the termination of your account, your registration data will be stored for a retention period of 6 months.</p>
<h2 id="usage-data">Usage Data</h2>
<p>When you use SignPath, we collect some basic information that most services collect based on our legitimate interests. This includes information about how you use SignPath, such as your IP address, session information and the date and time of each request.</p>
<h2 id="sub-processors-and-third-country-notice">Sub-processors and third country notice</h2>
<p>We share your data with a limited number of third party service providers who process it on our behalf to provide or improve our service, and who have agreed to privacy restrictions by signing data protection agreements. In case of data transfers outside of the European Economic Area, we make sure to implement appropriate safeguards with our sub-processors, including Standard Contractual Clauses.</p>
<table>
<thead>
<tr>
<th>Sub-processor</th>
<th>Description of data processing</th>
<th>Location</th>
<th>Security measures documentation</th>
</tr>
</thead>
<tbody>
<tr>
<td>RUBICON IT GmbH</td>
<td>Application management, administration, support</td>
<td>Europe</td>
<td><a href="https://www.rubicon.eu/en/services/managed-services/">RUBICON Managed Services</a></td>
</tr>
<tr>
<td>Microsoft Ireland Operations Limited</td>
<td>Hosting Platform Microsoft Azure</td>
<td>Europe</td>
<td><a href="https://docs.microsoft.com/azure/security">Azure security documentation</a></td>
</tr>
<tr>
<td>Twilio Inc.</td>
<td>Email delivery service SendGrid</td>
<td>United States</td>
<td><a href="https://www.twilio.com/legal/security-overview">Twilio Security Overview</a></td>
</tr>
<tr>
<td>Okta Inc.</td>
<td>Account management</td>
<td>Europe</td>
<td><a href="https://www.okta.com/sites/default/files/OKTA%20Security%20and%20Privacy%20Documentation%20May%202019.pdf">Okta Security & Privacy Documentation</a></td>
</tr>
</tbody>
</table>
<h1 id="data-we-process-when-you-visit-our-website">Data we process when you visit our Website</h1>
<h2 id="contact-form">Contact form</h2>
<p>If you use the contact form on our website to ask more about our products, we process the data you submit in the contact form in order to process your inquiry. If your inquiry also concerns our partner products, your data may be forwarded to these partners. The processing is based on Art 6 para 1 lit b and f GDPR, because it serves to initiate a contract with us and is in our legitimate interest. Your data will be stored for as long as necessary to process your request.</p>
<h2 id="newsletter">Newsletter</h2>
<p>You have the possibility to subscribe to our newsletter on our website. We will process the personal data you provide in order to send you our newsletter. The processing of this data is only possible with your consent. You are free to revoke your consent and unsubscribe from our newsletter at any time. To do so, just click on the unsubscribe-Link that is included in every newsletter mail you receive from us.</p>
<h2 id="cookies">Cookies</h2>
<p>Our website uses so-called “cookies”. Cookies are small text files which are stored on a visitor’s computer or device. There are two main types of cookies: Essential cookies, which are necessary to make a website operational and non-essential cookies, which collect e.g. browsing and usage statistics. While essential cookies are stored automatically on your computer or device based on our legitimate interests, non-essential cookies require your consent.</p>
<p>Some of the cookies used on our website originate from service providers outside the EU (primarily the US). It is therefore possible that some of your data (e.g. IP address, usage behavior, technical data) may be transmitted to the US. We only work with companies that are part of the Data Privacy Framework between the EU and the USA or use standard contractual clauses for the transfer of personal data to third countries according to Art 46 para 2 lit c GDPR. The participating companies of the Data Privacy Framework fall under the adequacy decision for secure data traffic of the EU.</p>
<p>You are free to revoke your given consent for the use of non-essential cookies and/or cookies from third countries at any time here:</p>
<p><a class="cursor-pointer revoke-cookie-consent"> Revoke consent </a></p>
<h3 id="google-analytics">Google Analytics</h3>
<p>In order to evaluate and improve our website, we use website analysis software Google Analytics provided by Google Ireland Limited. Google Analytics enables us to create statistical reports on visitor activity and to improve our content and website performance. For this purpose, your IP address is transmitted to Google and usually stored for 26 months. The use of Google Analytics requires a non-essential cookie, which is only set with your express consent. For more information, please refer to the privacy policies of <a href="https://policies.google.com/privacy?hl=en">Google</a> and <a href="https://support.google.com/analytics/answer/6004245">Google Analytics</a>.</p>
<p>We use Google Signals as an extension of Google Analytics. Signals is an alternative function to identify users on our website. Google Signals requires a Google account login and the activation of personalised advertising on your device.</p>
<h3 id="google-ads">Google Ads</h3>
<p>In order to make our website more attractive, we use Google Ads, a service provided by Google Ireland Limited. Google Ads enables us to make advertisements for our website in the Google search engine or on external websites and to evaluate how effective our advertising measures are. If you access our website via a Google ad, Google Ads will store a non-essential cookie on your PC or device. Google Ireland Limited is the responsible data controller when using Google Ads. We ourselves do not collect and process any personal data when using Google Ads. We only receive statistical evaluations from Google. For more information, please refer to the privacy policies of <a href="https://policies.google.com/privacy?hl=en">Google</a> and <a href="https://policies.google.com/technologies/ads?hl=en">Google Ads</a>.</p>
<h3 id="dealfront">dealfront</h3>
<p>dealfront is a web analytics service and evaluation tool operated by Liidio Oy / dealfront (Mikonkatu 17 C, 00100 Helsinki). For this purpose, dealfront collects the IP address of visitors. dealfront uses a cookie called “_lfa” and has an expiry date of two years from when it was first set. The cookie can only be set for this website domain and requires your consent. For more information, please refer to the <a href="https://www.dealfront.com/privacy-notice/">privacy policy of dealfront</a>.</p>
<h1 id="your-rights">Your rights</h1>
<p>When we process your personal data, you have the following rights under applicable European and Austrian data protection laws:</p>
<ul>
<li>Information</li>
<li>Correction</li>
<li>Deletion</li>
<li>Restriction</li>
<li>Data portability</li>
<li>Object</li>
</ul>
<p>If you believe that the processing of your data constitutes a violation of data protection laws, you are free to contact the <em>Austrian Data Protection Authority</em> at Barichgasse 40-42, 1030 Vienna, phone +43 1 52152-0, email [email protected].</p>
</article>
</div>
</section>
<!-- last_modified_at: --><section class='bg-dark-grey font-white newsletter' id="newsletter">
<div>
<h2>Sign up for news and special offers</h2>
<form class="ml-block-form" action="https://app.mailerlite.com/webforms/submit/d7c3i1" data-code="d7c3i1" method="post">
<input type="text" class="form-control" data-inputmask="" name="fields[name]" value="" placeholder="Name">
<input type="email" class="form-control" data-inputmask="" name="fields[email]" value="" placeholder="Email">
<input type="hidden" name="ml-submit" value="1">
<button type="submit" class="btn btn-secondary newsletter">Subscribe</button>
</form>
</div>
</section>
</main>
<footer>
<div>
<div>
<img src='/assets/signpath-logo-white.svg' width="334" height="67" alt='SignPath'/>
<svg viewBox="0 0 244 18">
<text x="0" y="15" textLength="244" lengthAdjust="spacingAndGlyphs">CODE SIGNING SIMPLE & SECURE</text>
</svg>
<div>
<a target="_blank" href="https://www.linkedin.com/company/33243108" rel="noopener noreferrer">
<svg class="icon footer" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><path fill="currentColor" d="M 8.6425781 4 C 7.1835781 4 6 5.181625 6 6.640625 C 6 8.099625 7.182625 9.3085938 8.640625 9.3085938 C 10.098625 9.3085938 11.283203 8.099625 11.283203 6.640625 C 11.283203 5.182625 10.101578 4 8.6425781 4 z M 21.535156 11 C 19.316156 11 18.0465 12.160453 17.4375 13.314453 L 17.373047 13.314453 L 17.373047 11.310547 L 13 11.310547 L 13 26 L 17.556641 26 L 17.556641 18.728516 C 17.556641 16.812516 17.701266 14.960938 20.072266 14.960938 C 22.409266 14.960937 22.443359 17.145609 22.443359 18.849609 L 22.443359 26 L 26.994141 26 L 27 26 L 27 17.931641 C 27 13.983641 26.151156 11 21.535156 11 z M 6.3632812 11.310547 L 6.3632812 26 L 10.923828 26 L 10.923828 11.310547 L 6.3632812 11.310547 z"/></svg></a>
<a target="_blank" href="mailto:[email protected]" rel="noopener noreferrer"><svg class="icon footer" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><path fill="currentColor" d="M 3 8 L 3 26 L 29 26 L 29 8 Z M 7.3125 10 L 24.6875 10 L 16 15.78125 Z M 5 10.875 L 15.4375 17.84375 L 16 18.1875 L 16.5625 17.84375 L 27 10.875 L 27 24 L 5 24 Z"/></svg>
</div>
</div>
<div>
<a href='/privacy-policy'>Privacy Policy</a>
<a href='/terms-of-service'>Terms of Service</a>
<a href='/status'><span style="color: lightgreen;"><svg class="icon small" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><path fill="currentColor" d="M 28.28125 6.28125 L 11 23.5625 L 3.71875 16.28125 L 2.28125 17.71875 L 10.28125 25.71875 L 11 26.40625 L 11.71875 25.71875 L 29.71875 7.71875 Z"/></svg>
</span>Status
</a>
</div>
</div>
</footer>
<div id='cookie-info'>
<h3>Cookie settings</h3>
<div class="container">
<span>We use cookies to enhance your browsing experience.</span>
<p class="mobile show-more active"><a>Show more information</a></p>
<p class="mobile show-less"><a>Show less information</a></p>
<span class="information">By clicking the “Accept” button below, you agree that non-essential cookies on our website may be used by us and by third parties, some of them located in the USA. Learn more about our cookies in our <a
href='/privacy-policy'>Privacy
Policy</a>
</span>
<div class="actions">
<button class='btn btn-primary' id='acknowledge-cookies-btn'>Accept</button>
<button class="btn btn-grey" id='refuse-cookies-btn'>Refuse</button>
</div>
</div>
<script>
const queryString = window.location.search;
const urlParams = new URLSearchParams(queryString);
const adgroupid = urlParams.get('adgroupid') ? urlParams.get('adgroupid') : document.cookie.match('(^|;)\\s*' + 'adgroupid' + '\\s*=\\s*([^;]+)')?.pop() || ''
if (adgroupid) {
const els_trial = document.querySelectorAll("a[href='" + window.location.protocol + '//' + window.location.hostname + '/Web/Subscription/StartFreeTrial' + "']")
const els_login = document.querySelectorAll("a[href='" + window.location.protocol + '//' + window.location.hostname + '/Web/Home/Login' + "']");
for (let child of els_trial) {
if (child.tagName === 'A') {
child.href = child.href + '?websiteCorrelationId=' + adgroupid
}
}
for (let child of els_login) {
if (child.tagName === 'A') {
child.href = child.href + '?websiteCorrelationId=' + adgroupid
}
}
}
</script>
</div>
</footer>
</body>
</html>