This privacy policy sets out how Cyberwolf processes personal data and how it is used. Cyberwolf consists of two independent data controllers:
- Cyberwolf bv, Guldensporenpark 21C, 9820 Merelbeke-Melle, Belgium, registered with company number BE0768.728.859.
- Cyberwolf INC, 691 John Wesley Dobbs Ave, Atlanta, GA, 30312, United States.
Each entity determines the purposes and means of its own processing independently.
Cyberwolf complies with national and European regulations on the protection of personal data.
Personal data we collect
We collect the following categories of personal data, directly from you:
- Contact details: name, email address, telephone number, company name, job title, submitted via a contact form, the self-assessment tools or when making an enquiry.
- Communication content: the content of messages and any attachments you send us.
- Technical data: IP address, browser type and referring URL collected automatically as part of normal website operation and via the self-assessment tools.
- Website use: which pages you visit, how you arrived and whether you came from one of our advertisements.
From time to time, Cyberwolf receives personal information about individuals from third parties. Typically, information collected from third parties will include further details on your employer or industry. We may also collect your personal data from a third-party website (e.g. LinkedIn).
Purposes
Personal data is used for the following purposes:
- Responding to enquiries via the contact form(s): based on our legitimate interest in handling enquiries efficiently.
- Responding to applications: to take pre-contractual steps.
- Processing event registrations: to confirm your registration and keep you informed about the event, as this is necessary to perform our agreement with you.
- Sending communications relating to security, networking and privacy: only with your consent.
- Measuring the use of our website and the results of our advertising: only with your consent.
- Providing the self-assessment tools: to carry out the check you request, as this is necessary to provide the service you asked for. Where you enter data about someone else, we rely on our legitimate interest in offering these security checks.
- Preventing abuse of the self-assessment tools: we keep a hashed form of your IP address for up to 2 hours to limit the number of checks, based on our legitimate interest in preventing abuse.
- Compliance with legal obligations: where required by law.
- Data sharing between the Cyberwolf entities: based on legitimate interest, in delivering consistent services.
Retention
Cyberwolf retains personal data for as long as necessary to fulfill the purposes of the processing.
Transfer of personal data
Cyberwolf will not sell, rent, distribute or otherwise make your personal data commercially available to third parties, except with your explicit consent.
Furthermore, we work with trusted service providers and share personal data with them only to the extent necessary. Where they act as our processors, they are contractually bound to process it only on our instructions. Other recipients act as independent or joint controllers.
Any transfer of personal data outside the European Economic Area is subject to appropriate safeguards: the recipient is located in a country, or is an organization certified under a framework, covered by an adequacy decision of the European Commission, or has agreed to the European Commission’s Standard Contractual Clauses.
We may share personal data between our affiliated companies. Both entities act as independent controllers; each entity only receives the data it needs. Personal data that is transferred between the companies is protected by Standard Contractual Clauses.
Disclosure may occur in response to a court order or other binding legal obligation. In the unlikely event of a merger, acquisition or similar restructuring, your data may be transferred as part of that transaction. Where legally permitted, we will make reasonable efforts to notify you before doing so.
Recipients of personal data
The service providers below process personal data on our behalf, or as independent controllers or joint controllers under their own privacy policies.
- Microsoft Azure hosts our website and the back end of the self-assessment tools in Microsoft’s West Europe region.
- HubSpot manages our contacts. It receives what you send through a contact form and the page you sent it from. With your marketing consent, it also recognizes returning visitors.
- Google provides Google Tag Manager, Analytics and Google Ads conversion measurement.
- LinkedIn (Insight tag) and Meta (pixel) measure the results of our advertising, with marketing consent only. The Meta data passes through our server on Amazon Web Services in the United States (Oregon). For collecting this data, we are joint controllers.
- The self-assessment tools. The Breach Checker sends the email address to Have I Been Pwned, through our own server, we do not keep the address. The Network Scanner sends the IP address to Shodan to look up what is publicly known about it. The Domain Security Checker looks up the domain name you enter at Google Public DNS, directly from your browser. The Personal Exposure Assessment runs entirely in your browser and sends nothing.
Google, LinkedIn and Meta can also connect your visit to an account you hold with them, under their own privacy policies.
If you choose to share information from the Cyberwolf website through a third-party service such as LinkedIn, you should review the privacy policy of that service.
Security
As a cybersecurity company, Cyberwolf applies rigorous technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and unlawful processing. For further information, please contact our Privacy Officer.
Privacy Officer
Cyberwolf has appointed a privacy officer for you to contact if you have any questions or concerns about Cyberwolf’s personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to Cyberwolf’s privacy officer, who can be contacted via privacy@cyberwolf.io.
Your rights
The European Union’s General Data Protection Regulation (GDPR) and other countries’ privacy laws (e.g. CCPA/CPRA) provide certain rights for data subjects. You have the following rights:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right of data portability
- Right to object
- Right to withdraw consent
To exercise any of these rights, contact us at privacy@cyberwolf.io. We will respond within one month of receipt of your request. If access cannot be provided within a reasonable time frame, Cyberwolf will provide you with a date when the information will be provided. Requests are ordinarily handled free of charge; a reasonable administrative fee may apply to manifestly unfounded or excessive requests.
If you believe your rights have not been respected, you may lodge a complaint with the Belgian Data Protection Authority: Drukpersstraat 35, B-1000 Brussels, tel. +32 (0)2 274 48 00 – contact@apd-gba.be – www.gegevensbeschermingsautoriteit.be
Changes to this policy
Cyberwolf may change this privacy policy to reflect current acceptable practices. If you have any questions, concerns or complaints, please contact us at privacy@cyberwolf.io.