Your privacy is important and Third Iron, LLC (the “Company”) works to preserve it by collecting a very limited amount of personal information when using LibKey Nomad (the “Extension). This document describes what personal data the Company collects and how we treat it when you use the Extension. By installing the Extension, you agree to this policy; if you do not agree with our policies and practices, your choice is not to use the Extension. This policy may change from time to time as described in Changes to Our Privacy Policy (see Changes to Our Privacy Policy). Your continued use of the Extension after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Information We Collect

The Extension is made available to people by their libraries who subscribe to the Company’s services. The Extension helps connect users to full text articles available from their libraries’ and Open Access sources. When the Extension is installed in the browser, first the user affiliates with his or her institution by selecting it from a dropdown list. Once installed, the Extension only becomes active on a defined set of domains that scholars typically visit to find article citations, websites such as PubMed, Wikipedia, library databases, and publisher websites. When active on these domains, the Extension looks for Digital Object Identifiers and PubMed Identifiers as they appear on the webpage. When found, the Extension sends the identifier information, along with institution ID and an internal API key to the Company’s servers, which then return article links which are displayed in the webpage.

When the Extension sends an article identifier and the related data to the Company’s servers, the IP address of the device using the Extension is logged. This information to used to connect the device using the Extension to the Company’s servers, to pass data between the Extension and the Company’s servers, and to diagnose any access problems.

We may disclose IP information in the following circumstances:
* Internally. In order to provide services through applications that require the input of information, we may need to share your information within Third Iron.
* Third Party Service Providers. We use a select number of trusted external service provides for certain technical data analysis, processing and/or storage offerings. We only share IP information with them that is required for the services offered and we contractually bind them to keep any information we share with them as confidential and to process Personal Data according to our instructions.
* Transfer or Assignment in Connection with Business Transfers or Bankruptcy. In the event of a merger, acquisition, reorganization, bankruptcy or sale of all or a portion of our assets, any user information owned or controlled by us may be one of the assets transferred to third parties. We reserve the right, as part of this type of transaction, to transfer or assign your personal information and other information we have collected from users of the Services to third parties. Other than to the extent ordered by a bankruptcy or other court, or as otherwise agreed to by you, the use and disclosure of all transferred user information will be subject to this Policy. However, any information you submit or that is collected after this type of transfer may be subject to a new privacy policy adopted by the successor entity.
* Response to Legal Requirements, Subpoenas, or Protection of Our Rights. We may share personal information as and when we believe in our sole discretion that disclosure is necessary or appropriate to meet legal requirements, to comply with a subpoena, law-enforcement or government request, to investigate fraud, or to protect our rights.
* To Our Affiliates. We may share some or all of your information with our subsidiaries and corporate affiliates, joint venture partners, or other companies that are or may become under common control with us. We will require these entities to comply with the terms of this Policy with regard to their use of your information.

How We Protect Your Information
The Company takes commercially reasonable security measures to protect against unauthorized access, alteration disclosure or destruction of the IP information we log. However, like other companies, Third Iron cannot guarantee 100% the security or confidentiality of the IP data we collect. If you have reason to believe that your interaction with us is no longer secure please notify us by sending an email with the subject line “Security Concern” and a description of the concern to privacy@thirdiron.com or by calling us at 855-649-7607.

Rights and Choices
European Union Privacy. If our processing of the IP data is subject to the General Data Protection Regulation 2016/679 (“GDPR”), we have additional obligations and you have additional rights under the GDPR. These rights and obligations are as follows:
* When you have given consent.
* When processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
* When processing is necessary to protect our legitimate interests or that of a third party, except where such interests are overridden by your interests or fundamental rights.
We may rely on more than one of the lawful bases for processing your information described above. If our processing is based on your consent, you have the right to withdraw the consent at any time by not using the Extension. Subject to your right to erase personal data, we will store your information for as long as necessary for us to provide the Services.
You have the right to be informed about your personal data and how it is being processed, to access, correct and erase personal data, to restrict further processing, to obtain and reuse your data for your own purposes across different services and to object to processing. You also have the right to lodge a complaint with the relevant EU supervisory authority.
If we transfer your information to a recipient in a country outside the European Economic Area (“EEA”), we will ensure that at least one of the following shall apply: (i) the transfers will be to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission; (ii) we have used specific model contracts approved by the European Commission which are intended to give personal data the same protection it has in Europe; (iii) or (iv) any alternative transfer mechanism that can under GDPR lawfully support the transfer. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
Links to Other Services and Websites
The Extension links to full text articles hosted by other sites. When Users select a link to an outside website, they are leaving the Third Iron site and are subject to the privacy and security policies of the owners of the third-party website. We encourage our users to be aware when the Extension links to other sites and to read the privacy policies of each website that collects personal information.

Changes To Our Policy
From time to time we may change this privacy policy. It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you by email to the primary email address specified in your account and/or through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting this Website to check for any changes.

Further Information About Our Privacy Policy and Practices
The Company periodically deletes retained IP data throughout the course of a library’s subscription to the Extension. Should the subscribing library end its access to the Extension, the Company will delete all IP information following a reasonable time after the end of the access period. This Privacy Policy replaces our previous policy on this topic and any statements or disclosures to you about our information practices.



Additional company-wide Third Iron Privacy Policy:
https://support.thirdiron.com/support/solutions/articles/72000570018-third-iron-privacy-policy