- What information we collect and how we collect it
- How we use that information
- How to find out more about our policies
This is a very important policy page, and we hope you will read it carefully.
Information We Collect
We do not ask you or anyone else to give us any personal information in order to use AppSec Santa.
We do collect anonymised information to provide a better service to all our users – from improving our less popular pages to tracking the commissions that allow the site to operate as a free resource.
The only instance when we do collect personal information – specifically, your name and email address – is if, and only if, you submit a review of one of the Application Security solution providers listed on our Site via the review submission forms we host.
We collect information in the following ways:
We give our visitors the option to submit reviews or submit questions about the Application Security solution providers listed on our Site.
Personal data collection
Once you submit your review, the following personal information will be collected (exactly as submitted):
– Email address
When you submit a User Review, we will ask for your email address to avoid bogus submissions. We will never share your data with any third party, unless it is with the Application Security solution provider you are subscribed to but only if you have entered into a prize draw they are running with us (see ‘Data use and transfer' for more details). We may occasionally contact you via the email address submitted to ask questions relating to the Application Security solution you have purchased. We will only email you for this sole purpose.
If you have submitted a question via our User Feedback form, your email address will only be used to send you a reply to your query.
Data use and transfer
Submitted user reviews and questions may be published on relevant pages of our Site. The published user review or user question will also include your Name, as submitted to us.
As aforementioned, we occasionally collect user reviews as part of prize draws. We will only email the winner(s) of the prize draw in order to award the prize.
If we are jointly running a prize draw with an Application security solution provider, we will share the winners' names and email addresses with that same provider for the purpose of awarding the prize. Upon specific request from the provider, we may also share with them the email addresses of all participants that entered their prize draw.
We will only transfer your submitted personal data outside of the EEA if:
- you have won a prize, and
- the Application security solution provider awarding the prize is located outside the EEA
Under no other circumstance will your name and email address be used or shared by AppSec Santa.
Your Name and email address, exactly as submitted to us, will be stored in our secure database for as long as your user feedback is published on our Site.
If you wish to have your review or question removed from our Site, and your name and email address removed from our database, please email your request to email@example.com.
Please note, the request must originate from the email address submitted as part of the review, as proof of authenticity.
We occasionally ask our visitors to apply to take part in testing new features of our website. As part of the application, visitors will be asked to provide their email address via a submission form.
Not all applications are successful and the email addresses submitted by all unsuccessful applicants will be purged once the recruitment phase is complete.
If you have been selected to participate in one of our tests, we will only email you instructions on how to carry out the test(s), and the agreed reward once the test(s) has been adequately completed.
Your email address will be stored securely until the testing period is over, at which point they will be purged.
We may also ask if you would like to be contacted to participate in future tests. If you give us consent to do so, your email address will be added to our ‘User Testing' email list.
If at any point you wish to have your email address removed from this list, and permanently purged from our records, please email your request to firstname.lastname@example.org.
Every time anyone visits our Site, we collect anonymised information about that visit. Like most big websites, we do this through Google Analytics software to better understand how people use our site. While we do not use Google Analytics to collect any personally identifying information (such as name or address), we do collect the following kinds of information:
- The pages you visit on AppSecSanta.com
- How long you spend on each page of our Site
- How you got to our Site
- What kind of device you were using
- Your home country and browser settings such as language
We also sometimes use other third-party analytics tools, such as Hotjar, that collect information about how you interact with our Site, such as what you click on and the parts of the page you spend most time on.
We use this information to better understand our customers and their needs in order to improve our service.
This information is anonymized and cannot be tied back to any individual. Nevertheless, we never share it with anyone outside of CNT Friends Oy unless specifically required to by law.
This anonymized analytics information is stored behind secure log-ins that can only be accessed by CNT Friends Oy employees using their official credentials.
Cookies and similar technologies
Like most websites, AppSec Santa puts small files (known as ‘cookies') onto your computer to collect information about how you browse our Site.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not, and by allowing us to earn commissions.
A cookie does not give us access to your computer or any information about you. You can choose to accept or decline cookies through your browser settings. Look at aboutcookies.org for detailed guidance about how to do this.
We may implement third party advertising or other content on the Site that may use clear gifs or other forms of web beacons, which allow the third party content provider to read and write Cookies to your web browser in connection with your viewing of the third party content on the Site.
Additionally, we may implement third party buttons (such as Facebook “like” or “share” buttons) that may allow a third party to collect information about you through their browser Cookies, even when you do not interact with the button.
Information collected through web beacons and buttons is collected directly by third parties, and AppSec Santa does not participate in that data transmission. Information collected by a third party in this manner is subject to that third party's own data collection, use, and disclosure policies.
Changes will become effective as soon as they are posted.
How To Contact Us
AppSecSanta.com is owned and operated by CNT Friends Oy. If you have any questions about our cookies or this policy, please contact us at email@example.com and we will get back to you within two working days.
CNT Friends Oy
Niittaajankatu 8A B 29a
Last updated: 03/12/2021