Please read this Privacy Policy carefully to understand how NetRex as a data controller, its subsidiaries, and affiliate companies (collectively referred to as “NetRex”) use and protect the information you provide. This “Privacy Policy” applies to the processing of personal data through any SW for Axis cameras downloadable or otherwise available from the NetRex site and any NetRex services purchased or otherwise available from the NetRex site and any variations or successor (collectively as the “NetRex Services”). This Privacy Policy applies to all users of NetRex Services and all NetRex´s customers worldwide.

1. What information NetRex collect from you

NetRex may collect two (2) types of information about you: Personal and Non-Personal.

1.1 Personal Information

Personal Information refers to information that lets NetRex know the specifics of who you are, and which may be used to identify, contact, or locate you (e.g. name, e-mail address, phone number, contact address, or your bank account number). NetRex may collect Personal Information when you use the NetRex Services including, without limitation, downloading or purchasing licenses, filling out surveys, paying invoices, corresponding with NetRex, or otherwise volunteering information about yourself.

1.2 Non-Personal Information

Non-Personal Information refers to information that, by itself does not identify you as a specific individual (e.g. serial number of your camera connected with license number, MAC, or IP address of your camera). NetRex may collect Non-Personal Information through methods discussed above as well as automatically through the use of industry-standard technologies described further below. This information may be, however, linked to your Personal Information and in such a case may also identify you.

2. How NetRex collects and uses your information

2.1 Registered users and User account

If you have purchased a subscription for the use of the NetRex Services, you may sign up and create your User account on the NetRex websites. The User account enables you, in particular, (i) manage your licenses for the use of NetRex Services and your cameras, (ii) change your preferences, or (iii) control your cameras.

As a Registered user, your e-mail address may be used to inform you about changes that are important for your usage of our products, news, and some special offers intended for our Registered users.

2.2 Communications

We may contact you through your email address where we may send you messages about the availability of the NetRex Services, security, or other service-related issues and other changes which are important for your use of the NetRex Services. We can also send messages about how to use the NetRex Services and/or the products you use or have bought, network updates, legal notices, and/or reminders. You may unsubscribe from receiving the news (i. e. to object to receiving the messages from us based on our legitimate interest) within every email delivered to you or you can contact us at info@netrex.cz. Please be aware that you cannot opt out of receiving service messages from us, including security and legal notices.

2.3 Developing NetRex Services

We may also use your data, in particular, your Non-Personal Information, for monitoring NetRex performance and traffic on NetRex Services and for the further development of NetRex Services in order to provide you and others with a better, more intuitive and personalized experience and to drive engagement on the NetRex Services.

2.4 Customer support

We use your Personal and Non-Personal Information (which can include communications with you) to investigate, respond to and resolve complaints and NetRex Service issues (e.g., bugs).

2.5 Legal claims

In some events, we may also process your Personal and Non-Personal Information (including, but not limited to, your purchase history, debts, and information on your use of NetRex Services) to help us to establish, exercise, or defend legal claims.

2.6 Promotional e-mails

If you have asked us to send you our (and provided us your consent thereto) newsletter, we will send you our campaigns which inform you about the news of our products.

3. Retention periods

3.1 We retain your personal data (both Personal and Non-Personal Information) while your license to NetRex Services is in existence or as needed to provide you the NetRex Services. This includes data you provided to us and data generated or inferred from your use of our services.

3.2 If you have created the User account that allows you to manage your licenses, you can, subject to your subscription, close and delete this User account. If you choose to close your User account, we generally delete closed account information without undue delay, but no longer than within 30 days of account closure, except as noted below.

3.3 We may retain your personal data even after your license has expired, you have ceased to use our CamStreamer Services, and/or after you have closed your User account if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security or prevent fraud). After that, we may also retain de-personalized Non-Personal Information.

4. Disclosure of your personal data to third parties

4.1 Service providers

We use others to help us provide the NetRex Services (e.g., maintenance, analysis, audit, payments, fraud detection, marketing, and development). They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.

Service providers, we work with to deliver our business, are acting as processors and provide us with:

1. website development and hosting services; and/or
2. IT, system administration, and security services
3. MailChimp is used for Communications (Section 2.2 above) with you and sending Promotional emails (Section 2.6 above).

We require third-party service providers to maintain appropriate security to protect your information from unauthorized access or processing.

Whenever in the course of engaging the service providers, we transfer personal data to countries outside of the European Economic Area and other regions with comprehensive data protection laws, we will ensure that the information is transferred in accordance with this Privacy Policy and as permitted by the applicable laws on data protection (such as on the basis of Standard Contractual Clauses, EU-U.S. Privacy Shield Framework and/or adequacy decisions).

4.2 Sharing data with third parties

NetRex does not sell, trade or rent Personal Information collected through the NetRex Services to any third party unless you have requested us to disclose your Personal Information to a third party (such as YouTube.com when streaming your videos directly to YouTube.com; in such case please consult YouTube Privacy Policy).

Notwithstanding the foregoing, it is possible that we will need to disclose information about you when required by law, subpoena, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you, (3) investigate and defend ourselves against any third-party claims or allegations; or (4) exercise or protect the rights and safety of NetRex. We attempt to notify our users about legal demands for their personal data when appropriate in our judgment unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.

4.3 Third-party links

The NetRex Services may contain links to third parties who may collect Personal Information and Non-Personal Information directly from you (such as YouTube.com for which please consult YouTube Privacy Policy). Additionally, NetRex may use third parties to provide components of the NetRex Services.

In either case, such third parties may have separate privacy policies and data collection practices, independent of NetRex. NetRex: (a) has no responsibility or liability for these independent policies or actions; (b) is not responsible for the privacy practices or the content of such websites; and (c) does not make any warranties or representations about the contents, products or services offered on such websites or the security of any information you provide to them.

5. Cookies

5.1 As further described in our Cookie Policy, we use cookies to ensure that you get the most out of our website. Cookies are small amounts of information in the form of text files that we store on the device you use to access our website. Cookies allow us to monitor your use of the software and simplify your use of the website.

5.2 NetRex uses Cookies and IP addresses to track features such as delivering content specific to your interests. We also use Google Analytics to collect information about your online activity on the website, such as the web pages you visit, the links you click, and the searches you conduct on the website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from, and the pages they visited. For more information about the information gathered using Google Analytics please visit this link.

5.3 Our website may contain content and links to other third-party websites, plug-ins, and applications that are operated by third parties that may also operate cookies. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites or cookies, we are not responsible for their privacy statements, and this Privacy Policy does not apply to them. We encourage you to consult the terms and conditions and privacy policy of the relevant third-party website to find out how that website collects and uses your information and to establish whether and for what purpose they use cookies.

5.4 For more information about how we use cookies, and how to manage or reject them, please visit our Cookie Policy.

6. How to access and change your personal data

6.1 Under the EU General Data Protection Regulation, you have the right to access, rectify, port and delete your personal data (i.e. both the Personal and Non-Personal Information where they identify you).

6.2 For personal data that we have about you may request to:

• Change or correct your data: NetRex shall allow Users to update or correct personal information previously submitted, but only to the extent such activities will not compromise privacy or security interests.
• Delete your data: You can ask us to erase or delete all or some of your personal data, provided, however, that such data is no longer necessary to provide the NetRex Services to you and/or for any other purpose for which NetRex disposes with a relevant legal basis as described in Section 2 above).
• Object to, or limit or restrict use of your data: You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held) when we process such data on the basis of our legitimate interest (such as for the communication with you).
• Right to access and/or take your data: You can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine-readable form.

6.3 To exercise any of your rights, please contact us at info@netrex.cz. We are committed to providing a safe, secure, and all-around great service. Therefore, before providing you with the requested personal data and/or before taking any further action to facilitate your request, we may require additional information from you we can use to verify your identity, address or other information or to manage risk and compliance throughout our relationship.

7. Safeguarding your personal data

NetRex takes appropriate security measures to protect against unauthorized access, alteration, disclosure or destruction of Personal Information. These include, but are not limited to, internal reviews of: (a) CamStreamer’s data collection; (b) storage and processing practices; (c) electronic security measures; and (d) physical security measures to guard against unauthorized access to systems where CamStreamer stores Personal Information.

All CamStreamer employees, contractors, and agents who access Personal Information are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution or unauthorized use or disclosure of Personal Information.

8. Data processing in NetRex Cloud

General Data Protection Regulation (GDPR) is a new general measure on the protection of personal data in the EU which will come into effect on May 25th, 2018.

We have been dealing intensely with the issue of GDPR in our company and are required to fulfill the conditions that this new norm binds us to, at the latest on the date that it comes into effect. We declare the following in regard to security and organizational measures linked to providing our services:

• The NetRex platform allows for effective control of access to individual cameras and the footage from them.
• NetRex strictly regulates which of its employees has the right to access its clients’ data. Also, technical support’s access to footage and live views must be agreed upon by the system administrator.
• We are constantly working on securing the platform and reacting to current threats by updating the system.
• Cameras communicate with servers of the platform via an encrypted TLS tunnel. Authentication is carried out properly on both sides (server to device and device to server) so that an attacker cannot impersonate the device or server. In addition, data are sent from the camera through an HTTPS connection with an authenticated client certificate. Note: This information is valid for cameras with FW >= 5.60.
• Data between the NetRex platform and the client are exclusively transferred via an encrypted HTTPS connection with a trusted certificate authority. Our HTTPS server is correctly configured, and has an A+ rating according to https://www.ssllabs.com/ssltest/analyze.html?d=system.netrex.cz&hideResults=on. We use HSTS technology to enforce the encryption of data.
• Recordings and other user data are saved on servers belonging to the NetRex company. They are hosted in two data centers: TTC DC1, Tiskařská 257/10, 108 00, Prague 10-Malešice and TTC DC2, Sazečská 595/10, 108 00, Prague 10-Malešice. Both data centers have TIER III certification. Only authorized employees of the NetRex company have access to the servers. Client data are not saved outside the territory of the EU. Servers are located in a lockable rack in a data hall with controlled access and a camera system. The data hall is located in the Data Center, which fulfills security criteria (24/7 security guard, monitoring of authorized individuals upon entry, monitoring activity in the hall via camera system). Both data centers have agreed to fulfill the conditions of GDPR. In addition, recordings are archived in a proprietary format.
• If data is saved on the SD card, the Axis cameras that we use exclusively make it possible to encrypt recordings saved onto the SD card.
• In the event of a request to delete a recording, it is possible to find this recording easily on the NetRex platform according to the time signature and delete it.
• The NetRex platform is equipped with a system for logging activity and operations.

9. Changes to NetRex’s Privacy Policy

NetRex continually strives to implement new technologies and processes to better protect you, your privacy and your use of the NetRex Services. As a result, changes to this Privacy Policy may be made by NetRex from time to time. In no event will these changes result in the degradation of any of the security measures designed to protect you from unauthorized disclosure, as such measures are described in this Privacy Policy.

10. Contact NetRex

If you have any questions about this Privacy Policy, please contact us by sending an e-mail to info@netrex.cz.