Privacy policy

In short

• There are no forms, accounts or sign-ups on this website, and no advertising.
• Google Analytics runs only if you accept it. Until you do, and if you reject it, the website sends nothing to Google.
• Our own server does not record your IP address.
• What you choose on the website stays in your browser.

What we process, and why

When your browser asks for a page or a file. Every request to www.ieos.net and brand.ieos.net passes through Cloudflare, which receives your IP address, your browser’s user agent, the address requested, the page that referred you and the time, as any web server does. This is used only to deliver the website and to protect it from abuse and attack. Our legal basis is our legitimate interest in a website that is secure and works (GDPR Article 6(1)(f)).

Our server’s logs. They record when the server starts, its errors and its health checks. They do not record visitors’ IP addresses or user agents. An error may record the address that was requested.

Google Analytics, only if you accept it. It records the pages you view, how far down a page you scroll, the links to other websites you follow, the page that brought you here, your browser, device type, screen size and language, and an approximate location that Google derives from your IP address. Google states that Google Analytics 4 does not log or store IP addresses. We use it to see, in total, which pages are read and how people find the website. Our legal basis is your consent (GDPR Article 6(1)(a)), which you can withdraw at any time under Cookie settings, at the bottom of every page.

The website tells Google Analytics not to collect data for Google signals or for advertising, and it never gives Google consent to store anything for advertising.

Your choices. What you choose on the website, such as your answer to the cookie question, is remembered in your browser. It stays there and is never sent to us. The cookie policy lists exactly what is stored.

Who processes it for us

Cloudflare, Inc. (United States) carries every request across its network and through an encrypted tunnel to our server, protects the website from attack, and stores and serves the fonts and images on brand.ieos.net, from storage in the European Union. Read Cloudflare’s privacy policy.

UpCloud Ltd (Finland) hosts our server in its data centre in Amsterdam, the Netherlands.

Google LLC (United States) provides Google Analytics, only if you accept it, as our processor under Google’s data processing terms. Read how Google uses information from sites that use its services.

We do not sell personal data, and we share it with no one else unless the law requires it.

How long it is kept

Our server’s logs: deleted within 15 days. They are rotated every night, and the last 14 are kept.

Request data at Cloudflare: kept by Cloudflare only as long as its data processing terms allow.

Google Analytics: data about each visit is deleted after 14 months. Totals that identify no one may be kept for as long as our Google Analytics property exists.

Your choices: in your browser, until you clear them.

Where it is processed

KONG GROUP LLC is a United States company. Our server is in Amsterdam, the Netherlands. Cloudflare answers each request from the data centre nearest to you.

If you accept Google Analytics, its data may be transferred to the United States. Google LLC and Cloudflare, Inc. take part in the EU-US Data Privacy Framework, which the European Commission has found to protect personal data adequately, and their data processing terms also include the Commission’s standard contractual clauses.

Your rights

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to:

• get a copy of the personal data we hold about you
• have it corrected
• have it erased
• restrict how we use it
• object to our use of it where we rely on our legitimate interest
• receive it in a portable form
• withdraw your consent at any time, without affecting what was done before
• complain to the data protection authority where you live or work

To use these rights, write to [email protected]. We may ask you to confirm who you are, and we will answer within the time the law allows.

The website never asks who you are, so we may hold nothing that we can link to you.

Security

The website is served only over HTTPS, and browsers are told to use nothing else.

Changes to this policy

When we change this policy, we change the date at the top of this page. If a change affects how we use data we already hold, we will say so on the website first.

Contact

Privacy questions: [email protected].