Privacy Policy for “Hornetdrive”

As at: 11.07.2023

I. Contact information of the provider

Hornetdrive is a service of the TeamDrive Systems GmbH:

II. Product information

Hornetdrive enables the user to store his data securely, redundantly and encrypted on multiple platforms and makes them available for retrieval. The data is stored in the Hornetdrive cloud in multi-secured data centres and on the various drive installations of users.

Files stored in Hornetdrive are always encrypted with an AES-256 algorithm before being uploaded to the user’s terminal device. The keys, in turn, are stored and transmitted exclusively in encrypted form. This ensures that unauthorised persons can never see these files in unencrypted form.

In certain versions of the software client, users can share individual files for download via a web link. These files are stored unencrypted in the Hornetdrive cloud after release.

III. General information on data processing

The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore we would like to inform you,

• when or during which actions we process data,
• which data we process and for what reasons,
• who receives data,
• which rights you have because of the data processing by us.

This privacy policy only governs the use of personal data on our website. www.hornetdrive.com/en including the subpages. If you leave our website via a link or visit our presence on a social media platform, you also leave the scope of this data protection declaration.

The transfer of information to or from this website is secured with TLS encryption.

You can download this data protection declaration permanently and at any time under the address
https://hornetdrive.com/en/privacy-policy read, print or download.

1. Hornetdrive

For the Hornetdrive service, the following data is collected, processed or used by Hornetsecurity within the framework of the provision of the Hornetdrive service:

• User’s access data: email address and password (required to run the service),
• Other user data: name, phone, mobile number (if entered by the user). This data is used for communication between users and is not used by Hornetsecurity itself. The input of this data is voluntary and not necessary for the performance of the service.
• Data about the drives set up by the user (necessary for the execution of the service): name of the drive, size, access rights of other users to the drive, size of data transmission to and from the drive,
• Data on the devices used by the user with Hornetdrive (required to perform the service): name of the device, platform of the device, installed Hornetdrive version, date/time of the first and last connection, IP address during installation,
• Data stored by the user in the encrypted drives in Hornetdrive (actual user data of the user, cannot be viewed by Hornetsecurity due to encryption).

2. Scope of the processing of personal data

The provision of the website requires the processing of various information. In addition, the extent of data processing depends on your use of the functionalities of the website, for example if you communicate with us via the contact form or consent to the processing of data.

You are not obliged to provide us with personal data. However, as far as the provision of this data is technically connected with the access to our site, a refusal means that you cannot enter and use our website.

As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 GDPR.

3. Legal basis for the processing of personal data

The legal basis for the processing of this information and all data stored in the services of Hornetsecurity is the necessity to fulfill the existing contractual relationship (see tab “Service agreement”). Further use by Hornetsecurity for its own purposes, advertising etc. does not take place.

4. Data processing of customer data by third parties

• The processing of customer data is basically carried out by Hornetsecurity itself. Basic services (computer centre services, Internet connection, transport and installation of systems and data carriers) are outsourced to third parties; no personal data is transferred to these third parties.
• The computer centres used are located in Germany. There is no transfer to third countries.

5. Technical and organisational measures

• The provider guarantees the technical and organizational measures required within the framework of the proper processing of the order in accordance with Art. 32 GDPR.
• By encrypting the data before uploading it to the Hornetdrive cloud, the provider has no access to the uploaded user data and cannot obtain it himself.
• The technical and organisational measures taken by the provider are listed „here“. They are regularly reviewed and adapted to technical progress.

6. Data erasure and storage duration

We will delete your personal data as soon as the legal basis for its processing no longer applies. In some cases, however, legal bases can also exist in parallel or, if a legal basis no longer exists, a new one can intervene, such as, for example, the obligation to store certain data in order to comply with a legal storage obligation.

IV. Data processing for the provision of the website

In order for us to be able to display the website to you, it is necessary to process certain information. This already takes place when you access our website. In addition, we offer various functions on our website that require further data processing.

1. Log files

When you use our services or access our website, various information is passed on to our servers. We need this information to establish and maintain the connection. This data also includes your IP address, which we treat as a personal date. In addition, the following data is collected:

• IP address and source port of the client (if necessary NAT-IP)
• Time stamp
• Type of connection request
• Protocol version
• Website requested by the client
• Possible occurring error code(s) from the squid / detailed error description
• HTTP status code from requested server
• HTTP status code forwarded to client
• Browser version
• Operating system

We store this data in so-called server log files. This data is not merged with any other data about you. The storage of log files including your IP address serves the legitimate interest of providing our website and the prevention of its misuse. Stored log files will be deleted after 14 months at the latest, unless a longer storage period is necessary, for example to fend off or clear up an attack on our website.

2. Cookies

We use cookies to establish and maintain the connection. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be necessary to establish a connection or to improve the use of the website.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

The use of technically required cookies and the associated data processing is based on our legitimate interest in a technically flawless and comfortable use of our website. Technical cookies are usually deleted automatically when you close your browser (session cookies), in other cases only after some time (persistent cookies). The storage period of persistent cookies is determined by the provider and can be viewed by you in your browser, for example.

You can find more detailed information in our cookie policy.

3. Contact forms

At various points on our website you will find contact forms which you can use at any time to send us an enquiry or, for example, request an offer for one of our services. For general enquiries, the following information is requested: recipient at Hornetsecurity, company, name, email address, phone and your message. When you request a quote for our services, you must provide the following information: Company, title, surname, email address, telephone number, desired service and the number of planned users. The data are marked as mandatory fields. All other data which you transmit to us within the scope of the inquiry, also via the free text field, are voluntary.

We use this data exclusively for answering your enquiry and the associated communication. The legal basis for this processing of your data depends on the content of your request. In principle, our legitimate interest in providing the contact functionality and answering your query transmitted via it applies here. If your inquiry is directed to the conclusion of a contract with us, the processing takes place within the framework of this pre-contractual obligation.

Your data will be deleted as soon as your request has been processed. If a contract is concluded, we may process the data to fulfill the contract.

4. Test-Onboarding (“Test Hornetdrive”)

To test our Hornetdrive service, you can register directly via our website. To do this, we need various personal information about you and any data relating to the service. The mandatory fields are marked accordingly. All other information is provided voluntarily.

In this respect, the legal basis for the processing is the implementation of pre-contractual measures or the necessity for the fulfilment of the contract. The storage period shall be measured accordingly on the basis of the duration of the contractual relationship. However, alternative legal bases, such as statutory storage periods, may intervene after the end of the contractual relationship.

5. Google Fonts

We use so-called web fonts from Google to display fonts. When you call up a page, your browser loads the required web fonts into your browser in order to display texts and fonts correctly. To do this, your browser connects to Google, which tells Google that our website has been accessed via your IP address. The use of Google Fonts is based on our legitimate interest in a consistent and appealing presentation of our web pages. If your browser does not support Google Fonts or Web Fonts, your device will use a standard font.

For more information about Google Fonts and Google’s privacy policy, please visit the web addresses below:

https://fonts.google.com/
http://www.google.de/policies/privacy

6. Social media plug-ins

If you like content from our website, you can go directly to our social media pages via buttons, where you have the option of sharing corresponding content. For this purpose, corresponding social media links are integrated into our website.

If you enter a subpage on which the social media links are integrated and follow these, your browser establishes a direct connection to the servers of the respective operators. When the connection is established, various pieces of information, including your IP address, are sent to the operators and stored by them. Since the operators are mostly based in the USA, the information is also stored there. It is possible that the operators may find out that your browser has accessed the relevant subpage of our website. This also applies if you do not have a user account with the social media network or microblogging service or are not logged on to our website at the time you visit it.

The same applies to any integrated plugins: If you are logged into your account at the same time, the operator assigns your visit to our website as well as any further interaction with the plugin (e.g. by activating the respective consent buttons, comments) directly to your account and saves this information. These actions may also be visible to other users of the network. You can prevent this data processing by not pressing the buttons. You can also log out of your social media network before visiting our site. In addition, you can also use add-ons such as the script blocker „NoScript“ (http://noscript.net) for your browser to prevent the execution of social media plug-ins in general.

The legal basis for data processing is our legitimate interest in providing you with an easy way to share information from our website on social media networks and microblogging services, thereby increasing our visibility.

For further information on data processing, in particular its scope and legal basis as well as rights in this regard, please refer to the data protection information and terms of use of the respective networks.

Our website uses the following social media plugins:

Facebook

Our website contains a social plugin of the social media network Facebook. The corresponding button can be recognized by the Facebook logo. You can find Facebook’s privacy policy here: http://www.facebook.com/policy.php.

Google+

Our website contains a social plugin of the Google+ social media network from Google. The corresponding button can be recognized by the “G+” logo. You can find Google’s privacy policy here: https://www.google.com/intl/de/policies/privacy/.

Twitter

Our website contains a social plugin of the microblogging service Twitter of Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The corresponding button can be recognized by the Twitter bird. Twitter’s privacy policy can be found here:https://twitter.com/privacy.

7. Other personal data

We would like to point out again that on this website Google Analytics has been extended by the code “_anonymizeIp();” in order to guarantee an anonymous recording of IP addresses (so-called IP masking). Hornetsecurity GmbH therefore does not store any personal data of a website visitor.

Clearly personal data is only collected if you provide it voluntarily, e.g. for a service or support enquiry via a contact form, by e-mail, online or in writing. In order to process your request, we may forward your personal data to the relevant department. Your personal data will be processed and stored via the OTRS ticket system and our servers. In addition, the data will not be passed on to third parties or used for purposes other than those stated in each case. Personal data that is transmitted to us (e.g. name, address, telephone number, fax number or email address) is used exclusively to answer your enquiry or to process your request. They will only be stored by us for as long as is necessary for the aforementioned purposes or as we are legally obliged to store them. You have the possibility to withdraw your consent at any time. For this purpose, please contact our data protection officer (see above). We would like to point out that e-mail messages in unencrypted form are not an absolutely secure means of communication against access by third parties and, in particular, are also accessible to the e-mail provider.

1. Google (Universal) Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google uses a cookie to collect information about your use of the website (including your IP address) in the United States and to store that information. However, we use Google Analytics exclusively with an anonymization function, in which the IP address is shortened by Google before transmission within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and only shortened there. Google analyses the information collected and sends us reports on the usage activities on our website and provides us with further services in this respect. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

In addition to blocking all cookies by your browser, you can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting cookies from this site in the future (this opt-out cookie only works in this browser and only for this domain, delete your cookies in this browser, you must click this link again): Deactivate Google Analytics under http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google Analytics, please see Google’s privacy statement: https://support.google.com/analytics/answer/6004245?hl=d.

2. Google AdWords

Our website uses Google’s advertising tool “Google AdWords” including its conversion tracking. We use this tool to determine how successful advertising for our services is on websites other than our own. For this purpose, a conversion cookie is set when you click on one of our advertisements. This cookie enables us to recognize that you have reached our website via this ad. We use such usage statistics to compile statistics to evaluate the conversion of our advertisements. We do not receive any information about you personally. The conversion cookie set in your browser is individual and cannot be used by other Google AdWords customers for their statistics. You can prevent tracking by deactivating the conversion tracking cookie in your browser settings.

3. Doubleclick

We also use the Doubleclick service from Google. A cookie is set and your browser is assigned a pseudonymous identification number (ID). The cookie determines whether and which advertisements were displayed and clicked in your browser. This allows us to better tailor your advertising to your interests. Since we have activated the IP anonymisation of Google on this website, your IP address is also shortened within the framework of Doubleclick before Google transmits it within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases the full IP address is transmitted to Google in the USA and only shortened there. Google analyses the information collected and sends us reports on the usage activities on our website. and provides us with further services in this respect. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. In addition to the general options mentioned above to prevent cookies, you can also prevent Google from storing the double-click cookie by downloading an appropriate browser plug-in. You will find this here.

Irrespective of this, you can generally object to the use of such cookies via various third party sites, e.g:

• Network advertising initiative: http://optout.networkadvertising.org/
• aboutads: http://www.aboutads.info/choices
• Youronlinechoices: http://www.youronlinechoices.com/uk/your-ad-choices/

The legal basis for data processing for analysis purposes is our legitimate interest in the statistical evaluation of your user behaviour in order to constantly optimise and better market our website and services.

VI. Possibility of opposition and removal

If the data processing is based on your consent or our legitimate interest, you have the right at any time to object to the processing or to revoke your consent. Your objection or revocation has only effect for the future. If the analysis cookies used offer their own technical possibilities for deactivation, this is shown there in each case. You can exercise your right of objection or revocation at any time by sending an email to us. If you object to a processing based on our legitimate interest. If you object to a processing based on our legitimate interest, we may nevertheless continue the processing if we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms. You can also revoke the consent to data collection and use given to us when setting up a test or license account at any time without giving reasons.

VII. Rights of data subjects

If data relating to your person is processed, you are the data subject within the meaning of Art. 4 para. 1 GDPR. As a data subject, you are entitled to the following rights with regard to your personal data. To exercise these rights, you can contact us using the contact details given above.

Right to information pursuant to Art. 15 GDPR

You have a right to information about your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.

Right to rectification under Art. 16 GDPR

You have the right to have false personal data corrected without delay and to complete inaccurate personal data.

Right to cancellation according to Art. 17 GDPR

You have the right to demand the deletion of your personal data if one of the reasons stated in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.

Right to limitation of processing pursuant to Art. 18 GDPR

You have the right to demand the restriction of the processing of your personal data if one of the reasons stated in Art. 18 GDPR applies, in particular at your request instead of deletion of the data.

Right to data transferability pursuant to Art. 20 GDPR

You have the right to request that all personal data we hold about you be disclosed to us in a structured, common and machine-readable format and to transfer this data to another responsible person without interference from the responsible person to whom the personal data was provided.

Right to appeal to the competent supervisory authority, Art. 77 GDPR

Pursuant to Art. 77 GDPR, you have the right to file a complaint with the supervisory authority responsible for you.

VIII. Transfer of data to third countries

The personal data that we collect from you within the framework of the website is also transferred to a certain extent to third countries outside the European Economic Area.

When using Google’s tools, in the exceptional cases described above, your IP address may be transmitted to Google LLC unabbreviated and only shortened there.

When you use any social media plug-ins, your IP address and other information will be transmitted to the respective operators.

Google, Facebook and Twitter are each based in the USA and thus in a so-called “third country” in accordance with Art. 44 GDPR. All the companies mentioned are certified under the “EU-US Privacy Shield” data protection agreement, which guarantees compliance with a European level of data protection.

VIIII. Other

This privacy policy will be amended or supplemented as necessary. If, in our sole discretion, such changes are material or significantly restrict your rights, we will notify you by email. By continuing to use Hornetdrive after the amendment has come into effect, you agree to the amended data protection declaration and are bound by it. German law applies. The agreed place of jurisdiction is Hanover.