Privacy Policy

Privacy Policy

Cipher (part of Aistemos Limited) respects the privacy of users and aims to process any personal data relating to those users in accordance with the General Data Protection Regulation (GDPR). This Website Privacy Policy sets out what kinds of personal data we may collect from you when you use the Cipher website (referred to as the “website”), and how we will process that data.

DATA CONTROLLER

For the purpose of the GDPR, the data controller is Aistemos Limited, whose principal place of business is Third Floor, 12 East Passage, London
EC1A 7LP, United Kingdom.

What kinds of information may we collect from you:

We may collect and process the following information about you in the course of your visit to the website:

• Basic personal information about you (such as your name, company, telephone number, address and email address) that you provide to us when subscribing to Cipher, registering as a user, or in the course of using our services.
• Information about your visit that is automatically collected by the website (such as technical information about your browser type and settings, your operating system, your internet protocol (IP) address, searches submitted and session length).
• Information received from other sources (such as our own service providers in technical, payment, delivery and analytics services). 

WHAT USES DO WE MAKE OF THAT INFORMATION?

The information that we collect about you may be used for marketing purposes and for the purposes of communicating with you about Cipher and its offerings, events and services.

LAWFUL BASIS OF PROCESSING

The lawful basis of processing is that at least one of the following applies:

• the data subject has given consent to the processing of his or her personal data; and
• the processing is necessary for the purposes of the legitimate interests pursued by Cipher, including the conduct of direct marketing activities and/or the efficient management of Cipher’s relationships with its customers, prospective customers, suppliers, shareholders, staff or other stakeholders.

TO WHOM MAY WE DISCLOSE YOUR INFORMATION?

 “Business as usual” disclosure to third parties. We may share your personal information with selected third parties including:

• Business partners, suppliers and sub-contractors for the performance of any contract we enter into with you.
• Analytics and search engine providers that assist us in the improvement and optimisation of Cipher systems.

Disclosure in the context of corporate transactions. We may share your personal information with third parties:

• If we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets.
• If Cipher or substantially all of its assets are acquired by a third party, in which case personal information held by it about its customers will be one of the transferred assets.

 Disclosure required by law or for legal enforcement. We may share your personal information with third parties where:

• We are under a duty to do so in order to comply with any legal obligation.
• We require to do so in order (a) to enforce or apply our own terms of use or terms and conditions of supply; or (b) to protect the rights, property, or safety of Cipher, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction. 

WHERE DO WE HOLD AND PROCESS YOUR PERSONAL DATA?

The personal information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA, who work for us or for one of our service providers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services.

The transmission of information through the internet is not completely secure. We will do our best to protect your personal data, but we cannot guarantee the security of your data transmitted to us via the internet, and any such transmission is at your own risk. However, once we have received your information, we will take all reasonable steps to ensure that it is treated securely and in accordance with this privacy policy. 

---

COOKIES

HOW ARE COOKIES USED WITHIN CIPHER?

A cookie is a small file consisting of letters and numbers, which is downloaded on to a device when the user accesses a website. The use of cookies in the website allows Cipher to recognise and authenticate your device, to improve the performance of Cipher, and to collect analytical information.

THE WEBSITES USE THE FOLLOWING KINDS OF COOKIE:

• Authentication cookies, used to secure your login, these are persistent
• Performance cookies, which are session cookies
• Functionality cookies, which are persistent

Cipher USES COOKIES FOR THE FOLLOWING PURPOSES:

• Cookies that are essential in order to enable you to move around Cipher and use its features, such as accessing secure areas of the website. Without these cookies, we are unable to provide the search services you require.
• Cookies that collect information about how users make use of the website, for analytics purposes. These cookies do not collect information that identifies any individual user personally. Information from these cookies is aggregated (and accordingly anonymous), and is only used to improve how the website works.
• Cookies that allow the website to remember your choices (such as your user name and previous searches) and to improve your user experience. The information that these cookies collect cannot be used to track your browsing activity on other websites.

By using Cipher systems, you agree that we can place these types of cookie on your device.

If at any time you wish to disable our cookies, you are able to do so through the privacy settings on your browser. However, please note that doing so may result in the loss of certain features of Cipher or the website.

Strictly Necessary Cookies

Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.

If you disable this cookie, we will not be able to save your preferences. This means that every time you visit this website you will need to enable or disable cookies again.

NAME	PROVIDER	PURPOSE	EXPIRATION
__sharethis_cookie_test__	cipher.ai	This cookie determines whether the browser accepts cookies.	Session
_GRECAPTCHA	google.com	This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.	179 days
rc::a	google.com	This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.	Persistent
rc::b	google.com	This cookie is used to distinguish between humans and bots.	Session
rc::c	google.com	This cookie is used to distinguish between humans and bots.	Session

3rd Party Cookies

This website uses Google Analytics to collect anonymous information such as the number of visitors to the site, and the most popular pages.

Keeping this cookie enabled helps us to improve our website.

NAME	PROVIDER	PURPOSE	EXPIRATION
bcookie	linkedin.com	Used by the social networking service, LinkedIn, for tracking the use of embedded services.	2 years
bscookie	linkedin.com	Used by the social networking service, LinkedIn, for tracking the use of embedded services.	2 years
lang	linkedin.com	Set by LinkedIn when a web page contains an embedded “Follow us” panel.	Session
lidc	linkedin.com	Used by the social networking service, LinkedIn, for tracking the use of embedded services.	1 day
lpv902671	pardot.com	Unclassified	1 day
st_samesite	consensu.org	Used by ShareThis to track visitor’s website navigation and preferences – This is used for internal statistics and marketing.	Session
UserMatchHistory	linkedin.com	Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor’s preferences.	29 days
visitor_id#	cipher.ai	Unclassified	10 years
visitor_id#	go.cipher.ai	Unclassified	10 years
visitor_id#	pardot.com	Unclassified	10 years
visitor_id#-hash	cipher.ai	Unclassified	10 years
visitor_id#-hash	go.cipher.ai	Unclassified	10 years
visitor_id#-hash	pardot.com	Unclassified	10 years
AnalyticsSyncHistory	linkedin.com	Unclassified	29 days
_fbp	cipher.ai	Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.	3 months
fr	facebook.com	Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.	3 months
i/adsct	t.co	The cookie is used by Twitter.com in order to determine the number of visitors accessing the website through twitter advertisement content.	Session
IDE	doubleclick.net	Used by Google DoubleClick to register and report the website user’s actions after viewing or clicking one of the advertiser’s ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.	1 year
test_cookie	doubleclick.net	Used to check if the user’s browser supports cookies.	1 day
tr	facebook.com	Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.	Session
VISITOR_INFO1_LIVE	youtube.com	Tries to estimate the users’ bandwidth on pages with integrated YouTube videos.	179 days
YSC	youtube.com	Registers a unique ID to keep statistics of what videos from YouTube the user has seen.	Session
yt.innertube::nextId	youtube.com	Registers a unique ID to keep statistics of what videos from YouTube the user has seen.	Persistent
yt.innertube::requests	youtube.com	Registers a unique ID to keep statistics of what videos from YouTube the user has seen.	Persistent
yt-remote-cast-installed	youtube.com	Stores the user’s video player preferences using embedded YouTube video.	Session
yt-remote-connected-devices	youtube.com	Stores the user’s video player preferences using embedded YouTube video.	Persistent
yt-remote-device-id	youtube.com	Stores the user’s video player preferences using embedded YouTube video.	Persistent
yt-remote-fast-check-period	youtube.com	Stores the user’s video player preferences using embedded YouTube video.	Session
yt-remote-session-app	youtube.com	Stores the user’s video player preferences using embedded YouTube video.	Session
yt-remote-session-name	youtube.com	Stores the user’s video player preferences using embedded YouTube video.	Session
lang	ads.linkedin.com	Remembers the user’s selected language version of a website	Session
_ga	cipher.ai	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	2 years
_gat	cipher.ai	Used by Google Analytics to throttle request rate	1 day
_gid	cipher.ai	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	1 day
_hjAbsoluteSessionInProgress	cipher.ai	This cookie is used to count how many times a website has been visited by different visitors – this is done by assigning the visitor an ID, so the visitor does not get registered twice.	1 day
_hjFirstSeen	cipher.ai	This cookie is used to determine if the visitor has visited the website before, or if it is a new visitor on the website.	1 day
_hjid	cipher.ai	Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes.	1 year
_hjid	cipher.ai	Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes.	Persistent
_hjIncludedInPageviewSample	cipher.ai	Determines if the user’s navigation should be registered in a certain statistical place holder.	1 day
AnalyticsSyncHistory	linkedin.com	Used in connection with data-synchronization with third-party analysis service.	29 days
hjViewportId	cipher.ai	Sets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes.	Session
personalization_id	twitter.com	This cookie is set by Twitter – The cookie allows the visitor to share content from the website onto their Twitter profile.	2 years
st_shares_#	cipher.ai	Unclassified	Persistent
vuid	vimeo.com	Collects data on the user’s visits to the website, such as which pages have been read.	2 years

---

DATA

What are my rights in relation to the uses of my personal information?

You have the following rights as a data subject, by reason of the General Data Protection Regulation:

• The right to request access to the personal data that we hold about you (also known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• The right to request rectification of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• The right to request erasure of the personal data that we hold about you (also known as “the right to be forgotten”). This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• The right to request restriction of processing about you. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• The right to object to processing. Where we are processing your personal data solely on the grounds that there is a legitimate interest to do so, and there is something about your particular situation which makes you want to object to processing on this ground, then this enables you to challenge the processing. You also have the right to object where we are processing your personal information for direct marketing purposes.
• The right to data portability. This enables you to ask us to transfer your personal information to another party in certain circumstances.
• Where our processing of personal data is based on your having given consent, you also have the right as a data subject to withdraw that consent at any time.
• You have the right to lodge a complaint with a supervisory authority. In the United Kingdom, the supervisory authority is the Office of the Information Commissioner, full contact details for which can be found on the ICO website.

If you wish to invoke any of the above rights, please contact our Privacy Manager using the details set out below.

The website may, from time to time, contain links to and from the websites of our data providers or other service providers. Please note that these third party websites have their own privacy policies, which you should check before submitting any personal information to them. Cipher does not accept any responsibility or liability for these third party websites or for compliance with their privacy policies.

DURATION OF PROCESSING

Cipher will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements.

AUTOMATED DECISION-MAKING (INCLUDING PROFILING)

Cipher undertakes no automated decision-making in respect of data subjects.

PLANS FOR FURTHER PROCESSING

Cipher has no plans to process personal data for reasons other than the reason for which the data was originally collected.

PRIVACY MANAGER

The contact details for the Cipher Privacy Manager are as follows:

Privacy Manager
Cipher
Aistemos Limited
Third Floor
12 East Passage
London
EC1A 7LP
United Kingdom

E: Privacy@Aistemos.com
D: +44 (0) 20 3909 9200

It is the responsibility of the Privacy Manager to ensure that our organisation and our staff are kept informed and advised about their obligations to comply with data protection laws, to monitor compliance with those laws, to advise on data protection impact assessments, to train staff and conduct internal audits, and to be the first point of contact for supervisory authorities and for individuals whose personal data we are processing.

You can contact the Privacy Manager using the above details if you wish to invoke any of your rights as a data subject, or if you have any other questions or concerns about personal data and privacy matters. Please include the words DATA PRIVACY REQUEST in the subject line of your email, or at the top of your letter.

WHERE CAN I FIND UPDATES TO THIS WEBSITE PRIVACY POLICY?

All changes to this Website Privacy Policy will be posted here. Please visit this page regularly to stay up to date. This policy was last updated in May 2018.

OTHER LINKS:

Customer Data Privacy Policy

HR Data Privacy Notice