Personal data
      Back to home
      1. Knowledge base
      2. Terms & conditions
      3. Personal data

      What personal data does Holm Security process and where?

      Business-related data

      Holm Security stores information used for common business purposes (like company name, contact person, contact email, and contact phone). According to GDPR, this does not require any specific agreement.

      Newsletters

      Starting in May 2018, newsletters are only sent to existing customers who agree to the default terms and conditions and consent to receive newsletters. To unsubscribe from the newsletter, please use the unsubscribe link at the bottom of the newsletter.

      Encrypted data storage

      Data storage for personal data is encrypted. 

      Location of data

      Data for customers within Europe is stored and processed in the EEA (European Economic Area) region. Currently, the location is Sweden. 

      Subcontractors

      Holm Security has no subcontractors that process end customers' personal data.

      Holm Security VMP

      The following information describes the personal data processed and stored in relation to each product.

      System & Network Security

      Scanner Appliance and external scanners (cloud scanners)

      No personal data is processed when using the product System & Network Security with a Scanner Appliance or external scanners (cloud scanners).

      Device Agent

      When using the product System & Network Security with the software endpoint agent Device Agent, the following personal data will be processed and stored:

      • Name
      • Email address
      • Username
      • MAC address
      • IP address

      Web Application Security
      The product Web Application Security scans for exposed personal data on websites, like personal IDs. Identified personal data is presented in Security Center and stored in the platform. In the scan policy, there's a possibility to exclude tests related to personal data. If the tests are excluded, no personal data will be processed or stored. 

      Personal data processed and stored for this product when related tests are active:

      • Personal IDs
      • Credit card numbers

      Phishing Simulation & Awareness Training
      The product Phishing & Awareness Training requires that personal email addresses be imported to Security Center and stored on the platform. These email addresses are used for simulating email attacks. Personal names can be imported or entered manually into Security Center to be used in the simulations. Personal data processed and stored for this product:

      • Name
      • Email address
      • Simulation and awareness training behavior data and statistics

      Cloud Security

      The product doesn't process any personal data.

      API Security

      The product doesn't process any personal data.