Purpose:

This information is used for the purpose of supplier relationship management, and more precisely to assess if you’d be a good match for us, to negotiate, prepare, execute, and/or manage our agreements with you, and to interact with you in that context.

Data Categories:

The data may be obtained from you directly, from the company or entity you represent and/or from relevant public resources (such as professional websites or social media profiles).

Legal Basis:

Where supplier and data subject are one and the same: contractual necessity. In all other cases: our legitimate interest, namely to perform and follow-up on our agreements with our suppliers.

Processing Term:

As from termination of the agreement with the concerned supplier: retention during the period relevant for legal action (currently 10 years).

Recipients:

This information can be shared companies or persons that are involved in the receipt or provision of the products or services (e.g. our consultants that work with you). This information can be shared with the general recipients, indicated in section 3.3 of this privacy statement.

Purpose:

This information is used for the purpose of customer relationship management, and more precisely to negotiate, prepare, execute, and/or manage our agreements with you, and to interact with you in that context (including potentially in the context of upselling).

Data Categories:

Legal Basis:

Where customer and data subject are one and the same: contractual necessity. In all other cases: our legitimate interest, namely to perform and follow-up on our agreements with our customers.

Processing Term:

As from termination of the agreement with the concerned customer: retention during the period relevant for legal action (10 years).

Recipients:

This information can be shared companies or persons that are involved in the receipt or provision of the products or services (e.g. our consultants that work with you). This information can be shared with the general recipients, indicated in section 3.3 of this privacy statement.

Purpose:

Sometimes we are required to store, process or disclose personal data pursuant to a legal obligation. It may for example concern: bookkeeping obligations, duties of cooperation with public authorities or judicial instances, etc.

Data Categories:

Any data which we need to process pursuant to the legal obligation.

Legal Basis:

Legal obligation

Processing Term:

During such term as legally required.

Recipients:

Any recipient we have to disclose the personal data to, in accordance with the legal obligation. Additionally, this information can be shared with the general recipients, indicated in section 3.3 of this privacy statement

Purpose:

To send to the e-mail communications for which you have subscribed.

Data Categories:

Information that is relevant to provide you the newsletter, such as your e-mail address.

Legal Basis:

Your permission (opt-in)

Processing Term:

Until 2,5 years after your subscription. On the expiry of this term, we will ask you to confirm if you want to continue receiving our communications.

Recipients:

This information can be shared with the general recipients, indicated in section 3.3 of this privacy statement.

Purpose:

We use personal data to (try to) find interesting prospective clients or security researchers, and to assess if you could be an interesting match to our company and/or services.

Data Categories:

The information may be acquired from you directly (e.g. by means of a connection request or other form of communication on professional social media), from your company or colleagues, from public sources where you published the information (such as professional websites), or may be obtained through references and/or parties with whom we cooperate in the context of business expansion services.

Currently, in the context of lead generation and prospect management, we have appointed as a joint controller and could receive your personal data from: Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy statement here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 and their Data Protection Officer can be emailed at: dpo@sopro.io.

Legal Basis:

Our legitimate interest to generate leads and prospects, for the purpose of expanding our business.

Processing Term:

Until two (2) years from the last meaningful contact we have with you.

Recipients:

From time to time, we may engage digital marketing agencies to conduct marketing activities on our behalf. Such activities may include or result in the processing of personal data.

Currently, we have appointed as a joint controller and may share your personal data with:

Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy statement here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.

Purpose:

If you are a current customer or researcher, if you have subscribed or otherwise requested to receive information about or products or services, or if we think you would be an interesting match with our company, we may use your personal data to communicate about Intigriti’s platform, activities and services, to invite you to events or seminars and/or to (try to) convince you to cooperate with us.

Data Categories:

Currently, in the context of direct marketing, we have appointed as a joint controller and could receive your personal data from: Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy statement here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 and their Data Protection Officer can be emailed at: dpo@sopro.io.

Legal Basis:

Our legitimate interest to inform prospects and clients about or services, or where applicable your consent.

Processing Term:

Until two (2) years from the last meaningful contact we have with you. You may at any time request us not to contact you anymore. Please use the contact details set out in the “

Introduction” of this privacy statement. this privacy statement.

Recipients:

From time to time, we may engage digital marketing agencies to conduct marketing activities on our behalf. Such activities may include or result in the processing of personal data.

Currently, we have appointed as a joint controller and may share your data with: Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy statement here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.

Purpose:

We use personal data to analyse prospect and customer interactions, and more specifically to assess the impact of and to improve our marketing content, e.g. by logging which document sections users pay much or few attention to.

Data Categories:

Legal Basis:

Your consent.

Processing Term:

24 months from your last interaction with the platform.

Recipients:

The provider of the platform is our data processor for the data described herein, and will therefore only process your personal data in accordance with our instructions thereto.

Purpose:

If you make a communication on the website and/or if you reach out to us, per e-mail, chat, telephone, regular post or otherwise, we store any such written or digital communication, or may take notes of any oral conversations we might have, for the purpose of handling your request, remark or question.

Data Categories:

Legal Basis:

Our legitimate interests, namely our freedom to operate our business and our interest in preserving evidence of communications made.

Processing Term:

During the period relevant for legal action (currently 10 years).

Recipients:

See our general information on recipients

Purpose:

The data will be used for evidentiary purposes, to anticipate on potential complaints, questions, demands, claims, proceedings and/or liabilities (either from or vis-à-vis- Intigriti) and, where applicable, to follow-up on any such matters.

Data Categories:

Legal Basis:

Legitimate interest, namely in the context of risk- and claims management (including the collection of debts).

Processing Term:

During the period relevant for legal action (in most cases this will be 10 years).

Recipients:

Information may be shared with legal or other relevant advisors, court instances, bailiffs and other parties involved in a dispute, claim, or demand. Additionally, this information can be shared with the general recipients, indicated in section 3.3 of this privacy statement.

Purpose:

We aggregate and anonymize data which might be interesting to us, so that we can further use such data for different purposes. The data will be aggregated and/or anonymized, so that the final set of data is no personal data in the meaning of the GDPR.

Data Categories:

All personal data categories referenced in the current privacy statement.

Legal Basis:

Legitimate interest, namely our freedom of enterprise.

Processing Term:

We can process personal data to generate statistics, for as long as we dispose over the personal data in the context of the a data processing activity described in the current privacy statement.

Recipients:

This information can be shared with the general recipients, indicated in section 3.3 of this privacy statement.