Information We Collect
The Extension is made available to people by their libraries who subscribe to the Company’s services. The Extension helps connect users to full text articles available from their libraries’ and Open Access sources. When the Extension is installed in the browser, first the user affiliates with his or her institution by selecting it from a dropdown list. Once installed, the Extension only becomes active on a defined set of domains that scholars typically visit to find article citations, websites such as PubMed, Wikipedia, library databases, and publisher websites. When active on these domains, the Extension looks for Digital Object Identifiers and PubMed Identifiers as they appear on the webpage. When found, the Extension sends the identifier information, along with institution ID and an internal API key to the Company’s servers, which then return article links which are displayed in the webpage.
When the Extension sends an article identifier and the related data to the Company’s servers, the IP address of the device using the Extension is logged. This information to used to connect the device using the Extension to the Company’s servers, to pass data between the Extension and the Company’s servers, and to diagnose any access problems.
We may disclose IP information in the following circumstances:
* Internally. In order to provide services through applications that require the input of information, we may need to share your information within Third Iron.
* Third Party Service Providers. We use a select number of trusted external service provides for certain technical data analysis, processing and/or storage offerings. We only share IP information with them that is required for the services offered and we contractually bind them to keep any information we share with them as confidential and to process Personal Data according to our instructions.
* Response to Legal Requirements, Subpoenas, or Protection of Our Rights. We may share personal information as and when we believe in our sole discretion that disclosure is necessary or appropriate to meet legal requirements, to comply with a subpoena, law-enforcement or government request, to investigate fraud, or to protect our rights.
* To Our Affiliates. We may share some or all of your information with our subsidiaries and corporate affiliates, joint venture partners, or other companies that are or may become under common control with us. We will require these entities to comply with the terms of this Policy with regard to their use of your information.
How We Protect Your Information
The Company takes commercially reasonable security measures to protect against unauthorized access, alteration disclosure or destruction of the IP information we log. However, like other companies, Third Iron cannot guarantee 100% the security or confidentiality of the IP data we collect. If you have reason to believe that your interaction with us is no longer secure please notify us by sending an email with the subject line “Security Concern” and a description of the concern to email@example.com or by calling us at 855-649-7607.
Rights and Choices
European Union Privacy. If our processing of the IP data is subject to the General Data Protection Regulation 2016/679 (“GDPR”), we have additional obligations and you have additional rights under the GDPR. These rights and obligations are as follows:
* When you have given consent.
* When processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
* When processing is necessary to protect our legitimate interests or that of a third party, except where such interests are overridden by your interests or fundamental rights.
We may rely on more than one of the lawful bases for processing your information described above. If our processing is based on your consent, you have the right to withdraw the consent at any time by not using the Extension. Subject to your right to erase personal data, we will store your information for as long as necessary for us to provide the Services.
You have the right to be informed about your personal data and how it is being processed, to access, correct and erase personal data, to restrict further processing, to obtain and reuse your data for your own purposes across different services and to object to processing. You also have the right to lodge a complaint with the relevant EU supervisory authority.
If we transfer your information to a recipient in a country outside the European Economic Area (“EEA”), we will ensure that at least one of the following shall apply: (i) the transfers will be to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission; (ii) we have used specific model contracts approved by the European Commission which are intended to give personal data the same protection it has in Europe; (iii) or (iv) any alternative transfer mechanism that can under GDPR lawfully support the transfer. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
Links to Other Services and Websites
The Extension links to full text articles hosted by other sites. When Users select a link to an outside website, they are leaving the Third Iron site and are subject to the privacy and security policies of the owners of the third-party website. We encourage our users to be aware when the Extension links to other sites and to read the privacy policies of each website that collects personal information.
Changes To Our Policy