This privacy notice (“Privacy Notice”) describes how B2Cyber and its subsidiaries and affiliates acting in its role as the data controller (“B2Cyber”, “our,” “us” or “we”) may collect, use and share information relating to you as an identified or identifiable natural person (“personal data”).
Please carefully read this privacy notice in its entirety before using our websites, email notifications, mobile apps, social media apps, widgets, and other online services of B2Cyber (the “Services”). This privacy notice will clarify to you what data we collect, how we use and share it, and help you understand your choices concerning to that data.
If you wish to exercise your data privacy rights in line with this notice, or if you have any questions about your data privacy rights our contact information is as follows:
Data Protection Officer
For individuals outside the EEA:
This Privacy Notice only governs the use of B2Cyber services that specifically link to this Privacy Notice.
Personal data we collect about you when you use our services
When you use our services, we may collect personal data from you, including but not limited to:
We collect personal information from third parties via usage data, including but not limited to:
We may use your personal data for the following purposes, as permitted by data protection regulations and legislation:
B2Cyber rely on the following legal bases for the collection, processing, and use of your personal data:
Generally, the provision of your personal data is voluntary. However, in some cases, it is necessary to enter into a contract with us or receive our products or services as explicitly requested by you.
By not providing your personal data may result in disadvantages for you. However, unless otherwise specified, not providing your personal data will not result in legal consequences.
We will only ever share personal data with companies, organisations and individuals outside of B2Cyber, as explained below.
Recipients within B2Cyber and Third Parties. We may share your personal data with affiliates of B2Cyber and other companies worldwide, including unaffiliated agents, suppliers or manufacturers, in order for these companies to contact you about relevant products, services or other offers that may be of interest to you. We may also share your personal data with relevant business partners.
Subject to the categories of personal data and the reasons for collecting personal data, your data may be shared with and provided to various entities within our internal departments. For example, IT, marketing and sales departments may have access to your data, depending upon product orders. Other departments, such as finance, auditing, legal and compliance, may require access to specific personal data, albeit on a “need to know” basis.
This Privacy Notice does not oversee unaffiliated third-party websites or any other website that does not link back to this Privacy Notice.
Service Providers. We share personal data with both affiliated and unaffiliated companies. These companies perform certain tasks on our behalf related to our business. These service providers include, but not limited to:
Any third-party service providers we use will receive your personal data only as necessary to perform their role and are instructed not to use your personal data for any other purposes.
We will use and disclose your personal data as permitted by data-protection laws and regulations as follows:
As our business continues to develop, we may at some time sell or buy additional products, brands, subsidiaries, stores or business units. In this respect, we may share or transfer personal data we hold about you with third parties as part of transactions including but not limited to company reorganisation, sale, merger, assignment, joint venture, transfer or disposition of any or all of our business, brands, subsidiaries, affiliates, or other company assets.
Customer information is typically a part of a business asset to be transferred but remains subject to any pre-existing applicable Privacy Notice.
We may share aggregated data that has been anonymised (data that is not identified) with third parties – for example, publishers, advertisers or associated websites and, accordingly, this data will be publicly available. An example of when we may do this is when we wish to share information publicly to show trends about the use of our services or products.
Links to Social Networking and other Third-Party Websites
If you have declared your consent regarding certain collecting, processing and use of your personal data, you can withdraw this consent at any time with immediate effect.
Further, you have the right to object to the use of your personal data for marketing.
Please note that the rights mentioned above and below may be subject to modification under the applicable data protection law.
For the avoidance of doubt, this Privacy Notice applies only for data subjects located in the EEA:
You have a right to request from us confirmation as to whether or not your personal data is being processed and, where that is the case, to request access to the personal data.
The access information includes information regarding the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom your personal data is disclosed.
You have the right to request and receive a copy of any personal data we are processing. However, in the case of repeated requests, we may charge a reasonable fee based on administrative costs.
You have the right to request that we rectify inaccurate personal data concerning you.
Right to request erasure (Right to be forgotten)
You have the right, in certain circumstances, to request from us the erasure of personal data concerning you, and we are obliged to erase such personal data.
Right to request processing restriction
You have the right to request that we restrict the processing of your personal data, in such cases.
You have the right to request and receive all personal data concerning you, which you have provided to us, in a structured, conventionally used, easy to read format. You have the right to transmit this downloaded data to another entity without obstruction from us.
You have the right to object at any time to the processing of your personal data by us.
In this case, we can no longer process your personal data.
Such rights to object may especially apply if B2Cyber collects and processes your personal data for profiling.
You also have to right to object to the use of your data for direct marketing purposes.
If you exercise this right, your personal data will no longer be processed for such purposes by us.
If you wish to exercise this right, please contact us at Yes
Please note that this right to object may not exist if your personal data processing is deemed necessary to facilitate the creation of a contract between you and B2Cyber or to execute a contract already concluded.
If you have already provided us with your consent for direct marketing purposes, for example, you have completed an online form or actively subscribed to our newsletters; you can withdraw your consent as already explained within this Privacy Notice.
Concerning automated individual decision-making, you have the right to
We retain personal data for as long as necessary to provide you with the services and products requested.
Once you have terminated your relationship with us, we will either destroy your personal data or anonymise it in line with the GDPR requirements ensuring that data can never again be identified.
There are some exceptions where statutory retention requirements are in force, for example, for taxation or legal purposes.
Where you show interest in our products and services and allow us to send you marketing information, we may retain your contact details for a more extended time.
We may also be obligated to retain your personal data after the contractual relationship termination if it is necessary to ensure compliance with applicable laws or if we need to maintain your personal data based on establishing, exercising or defending a legal claim. However, this will be on a need to know basis. To this extent and as far as possible, we will restrict any processing of your personal data to such limited purposes as required for the above and, in any event, destroy personal data once any legal bases are fulfilled and terminated.
This website and our services are not intended for children and we do not knowingly collect data relating to children.
The third-party tools we use on our website will only insert cookies and other tracking technologies if consented by you. We track your consent once you click ‘Accept’ on our Privacy centre. You can manage your permissions by Setting of Privacy.
We employ third party companies and individuals (“Service Providers”) to facilitate and make our website accessible to our visitors. These service providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
How we use your information
Any personal information collected from you will be processed for the purposes of performing our contract with you, for legitimate business reasons, to comply with our legal obligations or where you have consented to our use of your information. We may use your personal information for the following purposes:
We may amend and update this Privacy Notice from time to time.
We will notify you of any such changes, including when any proposed changes will take place.