ShieldNet 360 Privacy Notice

Effective as of 11 December 2025

Last updated on 22 July 2026

Uney GmbH (“Uney”, “we”, “our”, or “us”) recognizes the importance of protecting the privacy of your personal information. We have prepared this Privacy Notice to provide you with information about our privacy practices - how we collect, use, disclose and safeguard personal data you provide when you browse our website located at https://shieldnet360.com (“Site”), interact with our sales, marketing, and customer support channels, or manage a business account.

As used in this Privacy Notice, “You” refers to any website visitor, business prospect, trial user, or client organization representative who interacts with our public infrastructure or communication channels. Because our Services are designed for commercial entities, we do not intentionally or knowingly collect personal information from individuals under the applicable age of legal consent in thie. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to permanently delete such information from our systems. If you believe we may have inadvertently collected data from or about a child, please alert us immediately at support@shieldnet360.com.

This document is a transparency notice; it is not a commercial contract. If you are a business client, your organization's deployment of our cybersecurity products is governed exclusively by the Master Software-as-a-Service Agreement (MSA) and the Data Processing Agreement (DPA) executed between us and your organization. For information regarding the acceptable use and intellectual property terms governing your use of our marketing Site, please review our [Website Terms of Use].

1 - Information We Collect as a Data Controller

Uney acts as a Data Controller for the personal data collected through our marketing operations, website(s), and business portal(s). We collect the following categories of data to provide our Site, manage organization accounts, facilitate product trials, and communicate with you.

1.1 Information You Provide to Us

We collect personal information that you voluntarily submit when requesting a product demonstration, registering for webinars, attending industry events, participating in marketing activities, signing up for a product trial, completing an online purchase, or setting up a business account:

Contact Information: Full name, business email address, phone number, company name, industry, and professional role.
Trial Registration Data: Information you submit when you register for a trial version of our product, which allows us to provision your temporary environment and send you the download link for deploying the applicable software components.
Account Data and Billing Data: Billing addresses, tax identification numbers, and transaction history required for online checkout, subscription management, and payment processing.
Support and Communications: Records of your inquiries, support tickets, and feedback submitted to our team.

1.2 Information Collected Automatically

When you navigate our Site or access the business portal, our systems automatically log specific technical data to maintain network security and optimize functionality including, but not limited to:

Technical and Acquisition Logs: Including, but not limited to, Internet Protocol (IP) addresses, approximate geolocation, device and browser specifications, operating system details, internet service providers, referral URLs, HTTP status codes, campaign tracking parameters (such as UTM tags), and advertising click identifiers.
Interaction and Behavioral Metrics: Including, but not limited to, pseudonymous session and user identifiers, pageview history, clickstream data, scroll depth, session duration, document downloads, and specific interface engagement events.

1.3 Cookies and Tracking Technologies

We use essential cookies to securely authenticate business sessions. With your consent, we also deploy analytical and targeting cookies from authorized third-party partners to measure marketing performance and improve our Site. For detailed information on the specific trackers we use and to manage your consent preferences, please review our [Cookie Policy].

1.4 Information from Third Parties

We may receive information, including your personal data, from third parties and external sources (such as our partners, advertisers, business intelligence providers, and integrated services) and combine or associate it with information from our Site. We will treat the combined information as personal data in accordance with this Privacy Notice.

1.5 Exclusion of Sensitive Data

We do not intentionally collect or process "Special Categories" of personal data or highly sensitive personal information as defined by applicable privacy laws (such as exact GPS coordinates, racial or ethnic origin, political opinions, religious beliefs, or health data) for our marketing or business operations.

2 - How We Use Your Information

We process the personal data outlined in Section 1 strictly under recognized legal bases to operate our business, secure our platforms, and communicate with you.

2.1 To Provide Our Services

We use your Contact Information, Account Data, and Billing Data to fulfill our business agreements and deliver the requested services. This includes:

Registering and managing your business accounts.
Processing trial registrations, delivering agent download links, and enabling users to start using the product during their trial period.
Processing subscription billing, generating invoices, and managing payments.
Providing technical support, troubleshooting portal issues, and responding to inquiries.
Sending essential administrative notices, including security alerts and policy updates.

2.2 To Secure Our Operations

We use specific technical and professional data to protect our infrastructure and develop our B2B operations. This includes:

Security & Fraud Prevention: Analyzing technical logs (such as IP addresses and request headers) to monitor network stability, secure business portals, and block malicious cyber activity.
B2B Operations: Using professional contact information and business intelligence data to identify prospective business clients and conduct tailored business outreach.

2.3 For Analytics and Marketing

We operate on a strict opt-in basis for tracking and marketing. Only when you have explicitly granted consent do we process behavioral data to:

Deploy analytical trackers to measure content engagement, map pseudonymous user journeys, and optimize Site performance.
Attribute marketing acquisition and measure the effectiveness of our advertising campaigns.
Deliver promotional newsletters, webinars, and product updates. You may withdraw your consent for marketing communications or analytics tracking at any time via the unsubscribe links in our emails or through our Cookie Preference Settings.

2.4 To Fulfill Statutory Requirements

We process and retain specific Account and Billing Data to comply with binding regulatory obligations. This includes maintaining auditable financial records to satisfy Swiss tax laws and cooperating with authorized legal requests.

3 - Information Processed as a Data Processor

The core functionality of the ShieldNet 360 platform requires the continuous processing of deep infrastructure telemetry, network traffic, and cybersecurity event logs.

3.1 The Service Data Boundary

Uney acts strictly as a Data Processor (or Service Provider) for all cybersecurity data, threat intelligence, and internal communication logs generated by an organization's deployment of the ShieldNet 360 platform, including the data processed once a trial user installs the agent and begins using the product ("Service Data").

3.2 Contractual Governance

This public Privacy Notice does not govern, regulate, or grant individual rights over Service Data. The collection, processing, retention, AI utilization, and authorized sub-processing of Service Data are governed exclusively by the MSA and the DPA executed privately between Uney GmbH and the client organization.

3.3 Employee and End-User Inquiries

If you are an employee, contractor, or authorized system user of an organization utilizing ShieldNet 360, your employer is the legal Data Controller of your Service Data. Any inquiries regarding your system access, activity logs, or data privacy rights must be directed to your organization's IT or compliance department. Uney cannot delete, modify, or provide access to Service Data upon an individual user's direct request without explicit, documented authorization from the Client Data Controller.

4 - Data Sharing and Disclosures

Uney does not sell your personal data. We only share your information with third parties under specific circumstances to operate our business, provide our services, and fulfill legal obligations.

4.1 Authorized Service Providers

We share personal data with trusted third-party service providers who assist us in operating our Site and managing our business operations. These providers are bound by strict data processing agreements and are only authorized to use your information as necessary to provide their services to us. Categories of providers include:

Cloud hosting and infrastructure providers for our public Site.
Customer Relationship Management (CRM) and business communication platforms.
Payment processing gateways for secure online checkout and subscription billing. Please note that when you purchase directly via our Site, your payment details are processed directly by these third-party providers, who act as independent Data Controllers of your financial information and process it in accordance with their own privacy policies.
Marketing analytics and webinar hosting platforms.

4.2 Legal and Regulatory Compliance

We may disclose your information to law enforcement, government authorities, or authorized third parties if we believe in good faith that such disclosure is strictly necessary to:

Comply with a valid legal obligation, subpoena, or court order under Swiss, EU, or other applicable law.
Enforce our Website Terms of Use or commercial agreements.
Protect the physical safety, property, or legal rights of Uney GmbH, our client organizations, or the public.
Investigate and prevent fraud or malicious cyber activity directed at our infrastructure.

4.3 Employer and Administrator Access

If you register for ShieldNet 360 - or any of its associated products, modules, and services - using a corporate email address (e.g., @yourcompany.com) or access the platform through a workspace provisioned by your employer or organization, please be aware that your account is subject to your organization's control.

Your organization’s administrators may be able to:

Access, retain, or restrict your account and its contents.
View your profile information (such as name and email) and share it with other users within your organizational workspace.
Monitor your activity logs, usage data, and interactions within the platform.

In these instances, your organization acts as the Data Controller, and Uney acts as the Data Processor. Your privacy rights and the handling of this data are governed by your organization's internal privacy policies, not this document.

4.4 Business Transfers

If Uney is involved in a merger, acquisition, restructuring, bankruptcy, or sale of all or a portion of its assets, your business and account data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our Site of any such change in ownership and outline the choices you may have regarding your data.

5 - International Data Transfers

Uney operates across multiple regions. While our primary headquarters are located in Switzerland, we utilize secure, distributed cloud infrastructure to deliver our services and accommodate specific data localization requirements. To manage our Site and business operations effectively, the personal data we collect as a Data Controller may be transferred to, stored, and processed by our authorized service providers in jurisdictions outside of Switzerland and the European Economic Area (EEA).

5.1 International Transfer Safeguards

Whenever we transfer your personal data across international borders, we ensure it remains protected by strict legal mechanisms aligned with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

If we transfer data to a jurisdiction that has not been granted a formal "Adequacy Decision" by the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the European Commission, we enforce one or more of the following approved safeguards:

Standard Contractual Clauses (SCCs): We execute the legally binding SCCs approved by the European Commission, supplemented by the Swiss International Data Transfer Addendum where required by the FADP, to mandate strict data protection standards from our vendors.
Data Privacy Frameworks (DPF): We rely on the Swiss-U.S. and EU-U.S. Data Privacy Frameworks when transferring data to authorized, actively certified service providers located in the United States.

6 - Data Retention Limits

Uney adheres to the principle of storage limitation. We retain personal data only for as long as is strictly necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law.

Because retention needs vary based on the type of data and our legal obligations, we apply the following general retention frameworks:

6.1 Business Account and Financial Data

Data required to maintain your organization’s active account (such as Contact Information and Billing Data) is retained for the duration of our commercial agreement. Upon termination of the account, we will retain specific financial and transactional records for up to ten (10) years to comply with mandatory Swiss corporate accounting, tax, and commercial laws, as well as to defend against potential legal claims.

6.2 Marketing and Behavioral Analytics

Data processed on the basis of your consent (such as marketing analytics and newsletter subscriptions) is retained until you withdraw your consent or opt out of communications. We periodically review our marketing databases and will securely delete or anonymize profile data associated with prolonged periods of inactivity, or when the data is no longer necessary for our original outreach purposes.

6.3 Security and Technical Logs

While the retention lifecycles for all cybersecurity telemetry and event logs generated by our software products (Service Data) are governed exclusively by your applicable Master Software-as-a-Service Agreement (MSA) and Data Processing Agreement (DPA), Uney applies a distinct retention framework to its public infrastructure. Standard web infrastructure logs (such as IP addresses and connection headers) collected to secure our Site and business portal are retained only for as long as reasonably necessary for operational security, or until an associated security investigation concludes.

6.4 Secure Disposal

Once the applicable retention period expires, or upon a valid and verified deletion request, Uney will securely delete or irreversibly anonymize your personal data so that it can no longer be associated with you.

7 - Links to Third-Party Websites

Our Site may contain hyperlinks to external websites, plug-ins, or applications operated by third parties. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Uney does not control these third-party websites and is not responsible for their privacy frameworks or operational security. We strongly encourage you to read the privacy notice of every external website you visit.

8 - Data Security Measures

Uney is committed to protecting the confidentiality, integrity, and availability of the personal data we manage. We implement and maintain industry-standard technical and organizational security controls across our infrastructure, including:

Data Encryption: Enforcing industry-standard encryption protocols for personal data both while transiting across networks and at rest within our storage environments.
Access Control: Restricting access to personal data solely to authorized personnel who require access to fulfill their designated business duties, backed by strong authentication mechanisms.
Security Monitoring: Utilizing network and application-level monitoring tools to detect, isolate, and mitigate potential security threats or anomalies.
Assessments: Conducting regular internal reviews and vulnerability testing to continuously evaluate and improve our defensive posture.

9 - Your Privacy Rights

Depending on your jurisdiction, including if you are a resident of the European Economic Area (EEA), the United Kingdom, or Switzerland, you possess specific legal rights regarding the personal data we hold about you as a Data Controller.

9.1 Your Statutory Rights

Subject to local legal limitations and exemptions, you have the right to request:

Access: To receive a copy of the personal data we hold about you and understand how it is being processed.
Rectification: To correct any inaccurate or incomplete personal data associated with your business profile.
Erasure (Right to be Forgotten): To request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you successfully exercise your right to object. (Note: This right is not absolute and may be overridden by our mandatory financial or legal retention obligations).
Restriction of Processing: To temporarily pause our processing of your personal data while a data accuracy dispute or objection is being investigated.
Data Portability: To receive your data in a structured, commonly used, and machine-readable format, or request that we transfer it directly to another controller.
Objection: To object to our processing of your data based on legitimate interests. You hold an absolute right to object to the processing of your data for direct marketing purposes.
Withdrawal of Consent: To withdraw your consent at any time for processing activities that rely on consent (such as cookies or promotional emails), without affecting the lawfulness of processing that occurred prior to your withdrawal.

9.2 The Service Data Exception

As detailed in Section 3, Uney acts strictly as a Data Processor for the cybersecurity Service Data generated by our client organizations. If you are an employee or authorized user of a ShieldNet 360 client organization, you must direct all privacy requests (including access and deletion requests) directly to your organization’s IT, security, or compliance department. Uney cannot and will not fulfill privacy requests regarding Service Data without explicit, verified instructions from the client organization.

9.3 Exercising Your Rights

We provide you with direct control over your data to minimize administrative delays. Depending on the right you wish to exercise, you may utilize the following channels:

Self-Service Interface: You can independently access, review, correct, or update your personal account information (such as your name, corporate email address, and account preferences) at any time by logging into your profile settings within the platform. You may also instantly opt out of promotional communications by clicking the "Unsubscribe" link embedded at the bottom of any marketing email.
Manual Requests: For rights that cannot be fully executed through our self-service tools - such as requests for comprehensive account erasure (the right to be forgotten), data processing restrictions, or structured data portability downloads - please submit a written request to our support team at: support@shieldnet360.com.

For your protection, we must verify your identity and your relationship to the associated business account before fulfilling any request. We aim to respond to all valid requests within thirty (30) days, or within the timeframe mandated by applicable law.

9.4 Right to Lodge a Complaint

If you believe that our processing of your personal data violates applicable data protection laws, we encourage you to contact us first so we can address your concerns. However, you always retain the right to lodge a formal complaint with your local supervisory authority, including the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the relevant data protection authority in your country of residence.

10 - Changes to This Privacy Notice & Contact Information

10.1 Updates to the Privacy Notice

As our business operations and legal obligations evolve, we may update this Privacy Notice from time to time. The "Last Updated" date at the top of this document indicates when the latest modifications took effect.

If we make material changes to how we collect, use, or share your personal data, we will provide you with prominent notice - such as by sending an email to the address associated with your business account, or by posting an active alert on our Site prior to the changes taking effect. Your continued use of the Site or our services after the revised policy becomes effective indicates your acknowledgment of the updated terms.

10.2 Contacting the Data Controller

If you have any questions, concerns, or requests regarding this Privacy Notice or how Uney your personal data as a Data Controller, please contact our privacy team using the contact information below:

Uney GmbH - Grafenaustrasse 13, 6300 Zug, Switzerland
Email: support@shieldnet360.com

10.3 Contacting the Data Processor (ShieldNet 360 Platform)

Please be reminded that Uney acts as a Data Processor for all cybersecurity and network telemetry data (Service Data) collected by the ShieldNet 360 platform.

If you are an employee, contractor, or user inquiring about Service Data, your system access, or your privacy rights regarding network monitoring, you must contact your organization’s internal IT, security, or compliance department directly. Uney is contractually prohibited from responding to individual end-user requests regarding Service Data without documented authorization from the client organization (the Data Controller).