Privacy Policy - Heimdal Security

Heimdal License Agreement for Enterprise Users

1. Grant of license

This License Agreement (hereafter "License") grants to you, and you accept, a non-exclusive and non-transferable license to use the Heimdal software and Service (hereafter the "Software" and the "Service") including any patches and associated documentation (hereafter "Documentation") subject to the terms set forth herein. HEIMDAL reserves the right to supplement or amend the terms herein with terms transpiring from the Software itself and accepted by you during installation or updating.

This License does not convey to you with an interest or ownership in or to the Software, but only a limited right of use always subject to the terms of this License.

Using the free version of the Software (Heimdal FREE) in Enterprise settings, for professional use, is not permitted. If the version you have downloaded requires a valid license key, the Software will not run until the valid license key has been installed. You will receive your valid license key via e-mail from HEIMDAL directly.

Depending on the license you have purchased, HEIMDAL permits you to:

Copy the Software onto a single computer or onto multiple computers owned by you or operated by a third-party for your benefit (outsourced IT) at a single location, where "location" is defined as one (1) physical location unless you have a professional license, which will allow you to use the Software on more than one location operated by the same legal entity or Group as have been agreed with HEIMDAL.
The number of licenses in use is subject to random testing by Heimdal Security and will be adjusted to meet the actual usage if necessary. The Heimdal products Threat Prevention, Patch and Asset Management, NGAV+XTP, Ransomware Encryption Protection, Privilege Elevation and Delegation Management, Application Control on a per device basis. Email Fraud Protection, when installed on the Endpoint is per device. Products configured on MX Record E-mail services, E-Mail Security and E-Mail Fraud, are user based.
Remote Desktop Control is licensed on per admin basis.
Devices are made up of either standalone or in combination, Hostname/Motherboard ID/Harddrive ID. User-based product licensing for Heimdal products, such as MX record-based E-Mail services, is made up of unique users defined as unique E-mail addresses receiving more than 5 e-mails a month or Azure AD users.
It is solely the responsibility of the customer to revoke devices or users that are not in use. Heimdal measures license consumption on a 30 day period, as opposed to the industry standard of 12 months, which makes it much more favourable for the customer.
Ransomware Encryption Protection usage is charged on the Azure AD usage or device count, whichever of the 2 is higher.
Operated at a location shall also include portable computers (laptops and the like) if the computer in question is normally operated at that single location or its primary user has it working place at that location.

2. Restrictions

You agree to maintain all copyright notices on any full and partial copies of the Software. You must not use or allow any third party to use the Software in any manner that may infringe any intellectual property rights, including without limitation patents, copyrights, and trademark rights or any proprietary or trade secret interests.

You may not unless expressly permitted in mandatory regulation in the country where the Software is in use:

Reverse engineer or attempt in any manner to decompile the source code of the Software. Attempt to defeat any mechanisms in the software.

Rent, lease, sublicense, or in any manner copy or transfer the Software.

Obscure or obliterate any HEIMDAL copyright or trademark notices which appear on the Software, the documentation, the screen display, or otherwise in connection with the Software. Copy the software onto any computers not covered by a valid license.

3. Terms of license

This License becomes effective ("Effective Date") upon entering the valid license key received via e-mail from HEIMDAL, or upon your use of the Software, whichever occurs first, at which date you are considered to have accepted this License, and shall continue until terminated by either party or breached by you.

HEIMDAL may at its discretion disable the Software and/or terminate this License upon the breach of any term hereof, including (i) if applicable license or maintenance fees (if applicable) are not paid on time, (ii) if a third party instructed, engaged or allowed access by you, amend, modify, make additions, deletions or changes to the Software; or (iii) if you make or permit any third party to make unauthorized copies of the Software; or, (iv) if you fail to comply with any other provision of this License.

HEIMDAL is committed to compliance with all Anti-Money Laundering Laws and all applicable laws and regulations that govern the importing and exporting of goods, services, technologies and information, in particular with the ones imposed by European Union (“EU”) and/or United Nations (“UN”) and/ or United States (“US”). HEIMDAL will have “zero-tolerance” in regards to any infringements with any International Sanctions Law, standards, and regulation, especially with the ones imposed by the Directive (EU) 2018/843 of the European Parliament on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing. Also, HEIMDAL is expecting you to comply with all the provisions set in the HEIMDAL’S CODE OF CONDUCT ON COMPLIANCE WITH SANCTIONS & EMBARGOES AND RESTRICTED INDUSTRIES and HEIMDAL’S CODE OF CONDUCT FOR BUSINESS PARTNERS.

Further, HEIMDAL is entitled to terminate this License by giving a written notice of at least one (1) month. If this License is terminated, you must cease any use of the Software IMMEDIATELY and delete all copies of the Software, including without limitation any backup copies.

If you wish to terminate Heimdal must have received your termination prior to the expiry of the license or in accordance with the terms set out in your Enterprise licensing agreement. If an Enterprise licensing agreement is in place, the agreement will prevail over the terms of the online license agreement.

If you are using a version of the Software which requires a valid license, you are made aware of and accept that the license – unless otherwise expressly agreed with HEIMDAL – has to be renewed at the end of each term. If you do not terminate, HEIMDAL will renew and bill you for the usage that you have of the product under the old license terms and/or the previous licensed volume.

4. The service

The Heimdal Software performs an ongoing Service whereby it keeps the supported applications on your Computer updated with the latest released version of the application.

The Service can only be performed if you have a valid license for the supported applications and if you allow the Software to have Internet access.

The liability for licensing these applications and making sure that they have valid access and usage rights to them falls solely on the Customer, and not Heimdal Security whatsoever.

Thus claims for license abuse for these software fall under the Customer's responsibility.

Any claims raised towards Heimdal Security for your abuse of licenses, will be forwarded to you.

5. Proper use and maintenance

You are aware that the Software will only perform the Service efficiently and insubstantial in accordance with its documentation if you at all times keep the Software updated and if your settings with the Software are correct.

You are aware that we may at our own discretion and without any other notice than a notice in the Software itself when updating it add or delete applications supported by the Software. Maintenance will include:

That we on an ongoing basis keep the Software updated with the actual status of the application at that time covered by the Software. This update requires you to provide the Software with online access and to allow the Software to collect updates automatically.

Maintenance may include:

Further development of the Software as follows: HEIMDAL intends to further develop the Software with a view to:

- Improve the quality of the Software and correct errors and effects, if possible, Update and amend the Software in accordance with general demands of the users.

- Maintenance measures may include changed and/or reduced functionality.

The Documentation may be updated in connection with the delivery of new versions of the Software.

The maintenance services shall only be provided to versions of the Software elected by HEIMDAL and only for such a period of time as HEIMDAL chose to offer.

Access to any updates/maintenance is subject to a valid license/duly payment of the applicable and agreed license fee.

6. Copyright protection

HEIMDAL's ownership of the Software is protected by copyright law and international copyright treaties. The Software may not be copied or used except as permitted by this Agreement.

7. Limited or no warranty

You acknowledge that you know the essential functional characteristics of the Software and bear the risk should the Software not meet your wishes and requirements.

In the case of doubt, you should consult employees of HEIMDAL or third-party experts before accepting this License and relying on the Software.

You accept that the Software, like any standard software, may not be error-free or free from defects and that HEIMDAL is not liable for malfunctions due to errors or defects.

You also accept that ultimately it is your responsibility to keep your Computer safe and that we cannot be held responsible for any failure to update the Software or the current status of any applications supported by the Software within a specific time or at all.

HEIMDAL warrants for a period of thirty (30) days after the Effective Date only that the Software will in all material respects conform to the Documentation and that we will use reasonable efforts to keep the service performed by the Software updated.

No on-site warranty service is included in this Limited Warranty. This Limited Warranty is void if you breach this License or if the failure of the Software has resulted from failure to observe the Documentation or resulted from amendments, modifications or changes to the Software not made by HEIMDAL, or resulted from accident, abuse or misapplication. Any patches or replacement Software will be warranted for the remainder of the original warranty period only.

8. Your remedies

Your exclusive remedy for any material defect in the Software or lack in the service provided by the Software for which HEIMDAL is responsible and which is HEIMDAL's sole obligation under the Limited Warranty above will be for HEIMDAL to correct, in a reasonable time period, the error or defect in the Software or Service where the Software/Service does not perform substantially in accordance with the Documentation, or, at the exclusive choice of HEIMDAL, either to replace the Software, or to refund you a proportional part of the license fee which in the sole opinion of HEIMDAL corresponds to the value the defect Software or Documentation. You have no other remedies except if required by mandatory law in your jurisdiction.

9. No other warranties

Except for the expressed warranties set forth herein Heimdal and its suppliers and resellers disclaim all other warranties, promises or representations, expressed or implied, including the warranties of merchantability or fitness for any particular purpose, with respect to the software or equipment, components, any lost data or documentation, software produced data, any services or technical assistance or any other item delivered by Heimdal.

10. Limited liability

On no account is Heimdal liable to pay aggregate damages exceeding 1) the aggregate payments made by the Customer to Heimdal under the agreement / the agreements from which the claims originate. This limit constitutes the maximum accumulated liability in damages that Heimdal can incur due to all agreements with the Customer, including companies affiliated or associated with the Customer, irrespective of the basis of liability and the degree of Heimdal's negligence. On no account is Heimdal liable for any indirect loss, damage, or loss of data, including operating loss or loss of profit, irrespective of the basis of liability and the degree of Heimdal's negligence.

11. Third party rights

If a third party makes a claim against you that any part of the Software originating from HEIMDAL (HEIMDAL assumes no liability whatsoever in any part of the Software or software originating from third parties including any interfaces with the Software) infringes any patent, copyright or other intellectual property right (hereafter "Claim"), HEIMDAL will defend the you against the Claim and pay all costs, damages and expenses - including reasonable attorney's fees - finally awarded against you by a court having jurisdiction over the matter; provided that: (i) you notify HEIMDAL in writing no later than five (5) days after you have become aware of a Claim or a potential Claim; (ii) HEIMDAL may assume sole control of the legal handling of the Claim and all related actions and negotiations; and (iii) you - at your own cost - provide HEIMDAL with the assistance, information and authority, which in the opinion of HEIMDAL will be necessary to perform HEIMDAL's obligations under this clause.

Notwithstanding the above, HEIMDAL shall have no liability for (i) any Claim based on the combination of the Software with products or services not provided by HEIMDAL and (ii) the modification of the Software by any person other than HEIMDAL.

If, due to a Claim or the threat of a Claim, (i) any part of the Software is held by a court having jurisdiction over the matter, or in HEIMDALs' reasonable opinion may be held to infringe the rights of a third party by such a court, (ii) you receive a valid court order preventing you from using any part of the Software, or (ii) in HEIMDALs reasonable opinion you may receive such an order, HEIMDAL shall at its own expense (i) obtain for you the right to continue the use of this part of the Software, or (ii) replace or modify the Software to make it non-infringing provided that such modification or replacement will provide you with a substantially equivalent result. If none of the above options are available on a basis that HEIMDAL considers being commercially reasonable, then HEIMDAL may - in whole or in part - terminate the License with immediate effect and refund to you the license fee paid by the Customer for the infringing part of the Software, as well as the license fee paid for any part of the Software that are rendered unusable by you as a result of such unresolved infringement, upon return or deletion as required by HEIMDAL of the infringing and the unusable parts of the Software by you to HEIMDAL. Unless otherwise explicitly stated in this clause any claim due to a Claim or the threat of a Claim - including claims for damages and/or pro rata reduction - shall be governed by the limitation of liability in clause 8.

12. Disputes, choice of law and venue

This license shall be governed by, and exclusively construed in accordance with, the laws of the kingdom of Denmark, not taking into account its provisions that may lead to the application of any other substantial law than Danish law.

Any dispute, controversy or claim arising out of or in connection with this license or the breach, termination or invalidity thereof shall be settled by the ordinary Danish courts. You irrevocably submit to the city court of Copenhagen, Denmark, as the agreed venue in the first instance.

Notwithstanding the above, Heimdal shall at its sole discretion be entitled to initiate proceedings against you in a court of its choice including without limitation in case of non-payment by you or your infringement of Heimdal's intellectual property rights or trade secrets or breach of the license by you.

13. Delivery, Delivery Period

The agreed delivery period shall begin upon receipt of payment in full by our payment provider and Customer’s accurate supply of all data necessary for the processing of the order tothe payment services provider. We will promptly send you an email containing the license key for your product as soon as the payment was completed.

Heimdal License Agreement for Home Users

1. Grant of license

This License does not convey to you with an interest or ownership in or to the Software, but only a limited right of use always subject to the terms of this License.

Copy the Software onto a single computer or onto multiple computers owned by you or operated by a third-party for your benefit (outsourced IT) at a single location, where "location" is defined as one (1) physical location unless you have a professional license, which will allow you to use the Software on more than one location operated by the same legal entity or Group as have been agreed with HEIMDAL.
The number of licenses in use is subject to random testing by Heimdal Security and will be adjusted to meet the actual usage if necessary. The Heimdal products Threat Prevention, Patch and Asset Management, NGAV+XTP, Ransomware Encryption Protection, Privilege Elevation and Delegation Management, Application Control on a per device basis. Email Fraud Protection, when installed on the Endpoint is per device. Products configured on MX Record E-mail services, E-Mail Security and E-Mail Fraud, are user based.
Remote Desktop Control is licensed on per admin basis.
Devices are made up of either standalone or in combination, Hostname/Motherboard ID/Harddrive ID. User-based product licensing for Heimdal products, such as MX record-based E-Mail services, is made up of unique users defined as unique E-mail addresses receiving more than 5 e-mails a month or Azure AD users.
It is solely the responsibility of the customer to revoke devices or users that are not in use. Heimdal measures license consumption on a 30 day period, as opposed to the industry standard of 12 months, which makes it much more favourable for the customer.
Ransomware Encryption Protection usage is charged on the Azure AD usage or device count, whichever of the 2 is higher.
Operated at a location shall also include portable computers (laptops and the like) if the computer in question is normally operated at that single location or its primary user has it working place at that location.

2. Restrictions

You may not unless expressly permitted in mandatory regulation in the country where the Software is in use:

Reverse engineer or attempt in any manner to decompile the source code of the Software. Attempt to defeat any mechanisms in the software.

Rent, lease, sublicense, or in any manner copy or transfer the Software.

3. Terms of license

4. The service

The Heimdal Software performs an ongoing Service whereby it keeps the supported applications on your Computer updated with the latest released version of the application.

The Service can only be performed if you have a valid license for the supported applications and if you allow the Software to have Internet access.

The liability for licensing these applications and making sure that they have valid access and usage rights to them falls solely on the Customer, and not Heimdal Security whatsoever.

Thus claims for license abuse for these software fall under the Customer's responsibility.

Any claims raised towards Heimdal Security for your abuse of licenses, will be forwarded to you.

5. Proper use and maintenance

That we on an ongoing basis keep the Software updated with the actual status of the application at that time covered by the Software. This update requires you to provide the Software with online access and to allow the Software to collect updates automatically.

Maintenance may include:

Further development of the Software as follows: HEIMDAL intends to further develop the Software with a view to:

- Improve the quality of the Software and correct errors and effects, if possible, Update and amend the Software in accordance with general demands of the users.

- Maintenance measures may include changed and/or reduced functionality.

The Documentation may be updated in connection with the delivery of new versions of the Software.

The maintenance services shall only be provided to versions of the Software elected by HEIMDAL and only for such a period of time as HEIMDAL chose to offer.

Access to any updates/maintenance is subject to a valid license/duly payment of the applicable and agreed license fee.

6. Copyright protection

HEIMDAL's ownership of the Software is protected by copyright law and international copyright treaties. The Software may not be copied or used except as permitted by this Agreement.

7. Limited or no warranty

You acknowledge that you know the essential functional characteristics of the Software and bear the risk should the Software not meet your wishes and requirements.

In the case of doubt, you should consult employees of HEIMDAL or third-party experts before accepting this License and relying on the Software.

You accept that the Software, like any standard software, may not be error-free or free from defects and that HEIMDAL is not liable for malfunctions due to errors or defects.

Consumers may obtain a refund of the amount they paid for the Software product within a 30-day period. In order to obtain a refund, you must contact b2csupport@heimdalsecurity.com; any refund will be limited to the amount paid by you.

8. Your remedies

9. No other warranties

10. Limited liability

On no account is Heimdal liable to pay aggregate damages exceeding 1) the aggregate payments made by the Customer to Heimdal under the agreement / the agreements from which the claims originate or 2) DKK 500 - whichever amount is the lowest. This limit constitutes the maximum accumulated liability in damages that Heimdal can incur due to all agreements with the Customer, including companies affiliated or associated with the Customer, irrespective of the basis of liability and the degree of Heimdal's negligence. On no account is Heimdal liable for any indirect loss, damage, or loss of data, including operating loss or loss of profit, irrespective of the basis of liability and the degree of Heimdal's negligence.

11. Third party rights

12. Disputes, choice of law and venue

13. Delivery, Delivery Period

14. Payment

1. Age Restrictions

Persons under the age of 18 should use this Website only with the supervision of an Adult. Payment Information must be provided by or with the permission of an Adult.

2. Heimdal Security reserves the right to cancel purchases without stating reasons, for any reason prior to processing payment and dispatch.

3. All purchases will be charged to your nominated card or account (Paypal) upon submission of your order.

15. VAT

All prices are value added tax (VAT) inclusive, and the VAT rate is specific to the buyer’s country.

Heimdal Privacy Policy

General information

The Heimdal website (website) and all intellectual rights pertaining to this Website are owned to Heimdal Security A/S (hereafter mentioned as HEIMDAL) Vestergade 2, 1456 Copenhagen, Denmark.

Heimdal Security provides cybersecurity products and services to users around the world. Our mission is to supply our users with high-quality products and services, and an integral part of that is safeguarding the user's privacy by protecting their personal data.

In order to achieve this, we collect only absolutely necessary personal data, for specific purposes. When it comes to the collected data, our best efforts go to protecting it, either through anonymization or by pseudo anonymizing it.

According to the European legislation definition Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the following data we collect through this Website is considered personal data:

(a) 'personal data' shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;

(b) 'processing of personal data' ('processing') shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction;

(c) 'personal data filing system' ('filing system') shall mean any structured set of personal data which are accessible according to specific criteria, whether centralized, decentralized or dispersed on a functional or geographical basis;

(d) 'controller' shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of processing are determined by national or Community laws or regulations, the controller or the specific criteria for his nomination may be designated by national or Community law;

(e) 'processor' shall mean a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller;

(f) 'third party' shall mean any natural or legal person, public authority, agency or any other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the data;

(g) 'recipient' shall mean a natural or legal person, public authority, agency or any other body to whom data are disclosed, whether a third party or not; however, authorities which may receive data in the framework of a particular inquiry shall not be regarded as recipients;

(h) 'the data subject's consent' shall mean any freely given specific and informed indication of his wishes by which the data subject signifies his agreement to personal data relating to him being processed.

We here at Heimdal care deeply about your privacy, and we strive to ensure that your personal information always stays safe while we work hard to provide you a service you love and trust.

Our Privacy Policy explains how we collect, use, and transfer your information, and how you can control the use of the information that we collect.

This Privacy Policy applies to all our products and services, including Heimdal website, Heimdal Dashboard, our premium service, Thor Products, and all other Heimdal software and services (collectively, our "Services"). We keep usage statistics to allow us to better serve you and improve our Services. We may use information about how you use our Services to run and improve our Services, to provide, customize, and personalize communications and other content that we deliver or offer to you. This is discussed in detail below.

About this policy

This policy describes how we will use your personal data when you use our website at www.heimdalsecurity.com (the "site") or use or buy our products and services.

We have provided this policy to ensure that you understand what personal data we may collect and hold about you, what we may use it for and how we keep it safe. You have legal rights to access the personal data that we hold about you and to control how we use it which are also explained.

Information we collect

We may collect:

Personal data you provide to us

You may give us information about yourself by filling in forms on the site or by corresponding with us by phone, e-mail, chat or otherwise. This includes information you provide when you use a Heimdal Dashboard account, purchase and manage products, use the help center or technical support center, subscribe to one of our educational resources or other social media functions on the site and if you report a problem with the site or a product.

The information you provide may include your name, address, e-mail address, phone number and financial and credit card information

Personal data we collect when you use our site and products

We may collect:

The information gathered is information about the configuration of your IT-installation including but not limited to the configuration of the computers on which the software is installed, other applications on your computer, the use of the Software and the location of the computer/the software. We do not collect personal data other than data submitted to us when the Software is purchased/downloaded.

HEIMDAL will use the information gathered in order to keep your Computer protected and updated and to improve the software and to ensure that only copies of the software with a duly and valid license are in use.

technical information, including the Internet protocol (IP) address used to connect your computer or mobile device to the Internet, browser type and version, devices used or which connect to your network from time to time, time zone setting, browser plug-in types and versions, operating system and platform;
information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page;

Personal data we receive from other sources

We work closely with third parties (including, for example, business partners and sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

Data we collect when using Heimdal products

Based on the specific product utilized and preferences set in the Dashboard, the following data may be processed:

Product	Data Processed (description)
DNS Security Endpoint	Hostname, Username (associated with the Hostname), IP Address, Domains
DNS Security Network	Hostname, IP Address, Domain
Next-Gen Antivirus, XTP and MDM	Hostname, Username (associated with the Hostname), Personal Applications Executed
Ransomware Encryption Protection	Hostname, Username (associated with the Hostname), Personal Applications Executed
Privilege Elevation and Delegation Management (PEDM)	Hostname, Username (associated with the Hostname), Personal Applications Executed
Application Control	Personal Applications Executed
E-mail Security	E-mail Content, E-mail Attachments, E-mail body, E-mail Subject, E-mail Address, Source & Destination IP
E-mail Fraud Prevention	E-mail Content, E-mail Attachments, E-mail body, E-mail Subject, E-mail Address, Source & Destination IP
Remote Desktop Control	Username, IP Address, Session Recordings (if enabled, will be stored with Heimdal).
Patch and Assets Management	Hostname, Username (associated with the Hostname), Name of installed 3rd party applications and their versions, Name of available and installed Operating System updates
Threat - hunting and Action Center (TAC)	Depending on the products that you have the data processed above
Privileged Account and Session Management (PASM)	Server name (chosen by the data controller), number of accounts (administrator users and non-administrators), usage data (number and length of sessions)
Heimdal Dashboard (XDR – Unified Security Platform)	User login details: Full name, E-mail Address, Phone number (optional)

The collected endpoint and device logs are retrieved upon a Customer reported issue to our Support team. The retrieval of logs is automatic, permitted by the default enabled GP function called “Skip prompting the client when requesting logs” (“client” here should be understood as the Heimdal Agent). You may choose to disable this function at any time from your Heimdal Dashboard, however, this may cause a delay in the Support team’s ability to solve the technical issue reported.

By allowing us to collect this data you are contributing to a safer digital environment, whilst helping the algorithms become more adept in understanding the data processed. All data collected is subject to the same GDPR regulations as the rest of your data.

Note: The User and Administrator are responsible for managing the consent capability and feature within their Heimdal Dashboard, should this requirement not be enabled the user and administrator forfeits the right to Heimdal and the Reseller (if any assigned) to collect the endpoint and Event Viewer Application logs whenever they are needed with the purpose of resolving any issues that may arise.

Device information we may collect to develop and improve our Services

In order to improve our cybersecurity services and to supply our users with high-quality products and services, we may process username, time zone, telemetric data information about system-level operations on Windows and record activities such as process initiation, network connections, file and registry modifications, driver and service activity, and Windows Management Instrumentation (WMI) actions. Such data will mainly, but not solely, be collected from Sysmon.

Cookies and other tracking technologies

The Heimdal Security Website uses cookies to store information about visitors‘ preferences, to record user-specific information on which pages the site visitor accesses or visits, and to personalize or customize our web page content based upon visitors' browser type or other information that the visitor sends via their browser.

Heimdal Security may use the following services to place third-party cookies when navigating any of our websites. The objective is to provide anonymous insights for marketing, traffic analysis, and social media sharing.

Facebook Social Plugins – social media sharing
GetSiteControl – marketing
Google Adwords conversion – marketing
Google Analytics – traffic analysis
Google Tag Manager – tag management system
Google+ - social media
Gravatar – social media (only for blog comments)
Hotjar – traffic analysis and feedback gathering
LinkedIn – social media
Thrive Leads – marketing
Twitter sharing – social media sharing

If you wish to disable cookies, you may do so through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the browsers’ respective websites. What Are Cookies?

When do we collect your data

We will collect data about you when you use our Services, including in the following situations:

When you enter your contact details on our website to register for a product demo
When you register a Heimdal Dashboard Account
When you install the Heimdal Thor Agent on your endpoint or device
When you use another Heimdal feature for upload and storage
When you subscribe to our newsletters
When you purchase one of our products
When you contact us or our support services, via emails or letters
When you use our websites or blog
In customer surveys
If you participate in user research initiatives
If you participate in alpha/beta/etc. test releases
If you take part in our competitions or promotions
When you enroll or participate in one of our events
When you click on one of our ads or in our newsletters
When you subscribe to receive our press releases
When you work for Heimdal Security. In such case, please contact our Human Resources department separately for more information.
When we need your consent to use your personal data

Whilst we always want you to be aware of how we are using your personal data, this does not necessarily mean that we are required to ask for your consent before we can use it. In the day to day running of our business, we may use your personal data without asking for your consent because:

we are entering into and carrying out our obligations under a software usage agreement with you;
we need to use your personal data for our own legitimate purposes (such as the administration and management of our business and the improvement of our services). Our doing so will not interfere with your privacy rights.

We ask for consent only for marketing purposes. Please refer to the section on "How we use your personal data for marketing" to read about marketing consents.

Personal data you are legally obliged to provide

You are not under a legal obligation to provide us with any of your personal data but please note that if you elect not to provide us with your personal data we may be unable to provide our products or services to you.

Why we process your data

We will only use and process data about you if we have one of the following reason to do so: to fulfill a software usage agreement, we have with you;

when it is our legal duty (for example, to identify your age and make sure we are not collecting data from young children, for bookkeeping purposes and to fulfill our obligations in relation to authorities);
when you consent to it (for example, when subscribing to our newsletter or opening a Heimdal Dashboard Account);
when it is in our legitimate interest (for example, to enforce our policies, manage our everyday business, to use in an anonymized and aggregated way in order to perform statistical analysis, for direct marketing purposes, to ensure information security, to prevent fraud or to transfer the data to different part of the organization when necessary);
When we rely on a legitimate interest we have concluded that our interest is not overridden by your interests or fundamental rights and freedoms. You are welcome to contact us to learn more about how we have reached this conclusion;

How we use your data

to provide you with the information, products, and services that you request;
to provide you with marketing information in accordance with your marketing preferences
to provide you with reminders and renewal notifications relating to the Heimdal products and services that you use;
to inform about security breaches
to notify you about changes to our products or to our services or terms;
to ensure that content from the site is presented in the most effective manner for you and for your device;
to allow you to participate in interactive features of our service when you choose to do so;
to manage and administer our business;
to review and improve our products and services.
test, develop and improve our products;
to produce analytical, statistical and tracking data;
to understand how the site is accessed and used;
to administer the site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
to improve the site to ensure that content is presented in the most effective manner for users;
as part of our efforts to keep the site safe and secure;
to measure or understand the effectiveness of advertising served to users of the site and to target relevant advertising to users by demographic;

Where does Heimdal store my data?

Depending on the product you choose and your selected preferences, Heimdal's cloud servers are located:

a. Single database and backups located in Azure Europe (Netherlands/Amsterdam).

b. Single database and backups located in Azure UK (UK / London).

c. Single database and backups located in Azure US (US/ Virginia).

For Threat Prevention Network, data storage options include

a. Single database and backups located in AWS Europe (Germany/ Frankfurt).

b. Single database and backups located in AWS UK (UK/ London).

c. Single database and backups located in AWS US (US/ Virginia).

Cross-border DATA Transfers

We store and use your data outside your country.

We process data both inside and outside of the EU and rely on legally provided mechanisms to lawfully transfer data across borders. Countries where we process data may have laws which are different, and potentially not as protective, as the laws of your own country.

How do we share information?

We may share your personal information with any other companies that are part of the Heimdal™ Security A/S.

We may also share your information with selected third-parties outside of the Heimdal™ Security A/S including:

For B2B clients
- Any business partners, suppliers, and subcontractors we work with to provide you with the products and services you have requested from us.
- Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.
- We never share your contact details with third parties for marketing purposes; however, we use your B2B account to provide you with relevant B2B marketing, advertising, and personalization services.
For B2C clients
- Advertisers and advertising network that require the data to select and serve related adverts to you and others.
Enterprise data
- Heimdal™ Security A/S will not share any enterprise data entrusted to us by customers.

We may also share your personal data with third parties on a one-off basis, for example, if:

we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
If Heimdal Security A/S or substantially all of its assets are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or in order to enforce or apply our terms and conditions and other agreements entered into with you or to protect the rights, property, or safety of Heimdal Security A/S and its staff, our customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

We work with third-party companies who help us provide and improve our Services or who use advertising or related products, which makes it possible to operate our companies and provide free services to people around the world.

Here are the types of third parties we can share information with about you: Advertising, Measurement and Analytics Services (Non-Personally Identifiable Information Only).

We want our advertising to be as relevant and interesting as the other information you find on our Services. With this in mind, we use all of the information we have about you to show you relevant ads. We do not share information that personally identifies you (personally identifiable information is information like name or email address that can by itself be used to contact you or identifies who you are) with advertising, measurement or analytics partners unless you give us permission. We may provide these partners with information about the reach and effectiveness of their advertising without providing information that personally identifies you, or if we have aggregated the information so that it does not personally identify you. For example, we may tell an advertiser how its ads performed, or how many people viewed their ads or installed an app after seeing an ad or provide non-personally identifying demographic information (such as 25 year old female, in Madrid, who likes software engineering) to these partners to help them understand their audience or customers.

Vendors, service providers, and other partners.

We transfer information to vendors, service providers, and other partners who globally support our business, such as providing technical infrastructure services, analyzing how our Services are used, measuring the effectiveness of ads and services, providing customer service, facilitating payments, or conducting academic research and surveys. These partners must adhere to strict confidentiality obligations in a way that is consistent with this Data Policy and the agreements we enter into with them.

How do we protect your data?

We maintain physical, electronic and procedural safeguards to help guard your data in compliance with applicable privacy regulations. If transactions are offered on the Services, transaction information is transmitted to and from the Service in encrypted form using industry-standard Transport Layer Security (TLS used to be known as SSL) connections to help protect such information from interception. We strictly restrict authorized access to your data only to those persons who have a legitimate purpose to access it. We also have security measures in place to protect the loss, misuse and alteration of the data we process, like:

only storing your personal data on our secure servers;
using specialist third-party payment providers to process payments made through our site (read more in the section on "Making payments through our site";
ensuring that our staff receive regular data security awareness training;
keeping paper records to a minimum and ensuring that those we do have are stored in our locked offices;
We encrypt many of our services using SSL and we encrypt the data we store
2 or 3-factor authentications for logins

We encourage you to be careful when sharing your data with other users when you use our Services like email or chats. Heimdal will NEVER ask for your password to be sent separately or in clear text. Anyone doing so is probably trying to steal your stuff.

How can you request access to your data?

Here we have to inform about the possibility to opt-in or opt-out from email for example

For personal data that we have about you:

Delete Data: You can ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you).
Change or Correct Data: You can edit some of your personal data through your account. You can also ask us to change, update or fix your data in certain cases, particularly if it's inaccurate.
Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
Right to Access and/or Take Your Data: You can ask us for a copy of your personal data and can ask for a copy of personal data you provided in the machine-readable form.
Right to data portability
Right to be forgotten: You have the right to ask us to delete the data we collect about you at any moment you decide this.

If you have submitted personal information to us, you may at all time request a transcript of the registrations we have about you and the use of the Software. We may ask for a fee for providing you with the information. The fee will be the maximum amount allowed under Danish Law. If you would like to receive a transcript of the registration please email us at b2csupport@heimdalsecurity.com stating your license number and the e-mail address submitted to us when you downloaded the Software. Within 30 days we will furnish you with a copy of our registrations in the format they are stored in. If you want a copy of all information we have stored about you as a licensee please also request this information.

All the above can be done by contacting us at b2csupport@heimdalsecurity.com

How long will we keep your data?

We will keep your information for as long as you are a customer of Heimdal Security A/S. We may keep your information for longer for research or statistical purposes. If we do, we will make sure your information is anonymized and non-traceable to you as a person. We will also keep it for longer if we cannot delete it for legal or regulatory reasons. We will, however, delete all data that is no longer necessary after a reasonable period. For example, any inactive Heimdal Account will after a period of two (2) years be deleted unless they contained products you have purchased as we assume you would rather not have them deleted.

We will also delete data upon request.

Making payments through our site

All our payments are made through payment processors over a secure connection. Only the payment processors store your full payment card number or account information. During the order process, you will be directed on to pages hosted by our payment processor. Such pages will maintain the look and feel of the site but will have the trademark of the payment processor displayed. They will also offer you an automatic renewal of subscriptions and provide you with reminder notifications if your card has expired.

How will we use your personal data for marketing?

We will add your details to our marketing database if:

you register with your contact details for a product demo;
you buy our products or use them during a free trial;
you have told a third party that you would like them to pass us your contact details so that we can send you updates about our products;
you have registered for a Heimdal Dashboard account and have indicated during the sign-up process that you are happy to receive marketing communications;

If your details are included in our marketing database we will send you marketing communications by email.

If you wish to change your marketing preferences at any time you can do so by:

clicking on the unsubscribe or opt-out link that appears in each of our marketing emails;
updating your preference settings via your Heimdal Dashboard account;

We never share your contact details with third parties for marketing purposes but we do partner with a third-party advertising network to display advertising on the site and to manage our advertising on other websites. Our advertising network partner uses cookies and web beacons to collect information about your activities on the site and on other websites and uses this to provide you with targeted advertising based on your interests. Please note that opting out of receiving targeted advertising will not prevent you from receiving generic advertising.

What about links to third-party sites?

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Children’s Information

We believe it is important to provide enhanced protection for children online. We encourage parents and guardians to spend time online with their children to observe, participate in and/or monitor and guide their online activity.

Heimdal Security does not knowingly collect any personally identifiable information from children under the age of 13. If a parent or guardian believes that Heimdal Security, through its products, websites or services, has in its database the personally-identifiable information of a child under the age of 13, please contact us immediately (using the contact in the first paragraph) and we will use our best efforts to promptly remove such information from our records.

Who we are and how you can contact us

We are Heimdal Security, a company registered in Denmark with VAT Nr. 35 80 24 95. Our office is located at Vestergade 2, 1456 Copenhagen.

You can contact us by email at b2csupport@heimdalsecurity.com

How we keep this policy up to date

We will review and update this policy from time to time. This may be to reflect a change in the products or services we offer or to our internal procedures or it may be to reflect a change in the law.

The easiest way to check for updates is by looking for the latest version of this policy on the site.

Each time we update our policy we will update the policy version number shown at the end of the policy and the date on which that version of the policy came into force.

This policy came into effect on 06.04.2021.

License Agreement & Privacy Policy

License Agreement and Privacy Policy

Heimdal License Agreement for Enterprise Users

Heimdal License Agreement for Home Users

Heimdal Privacy Policy