Data Privacy | THREATINT

When you use our services, you are trusting us with your information. We understand this is a big responsibility and work hard to protect your information and keep you in control. This Privacy Policy is meant to help you understand what information we collect and why we collect it.

All our products and services are built with strong security features that continuously protect your information. The insights we gain from maintaining our services help us detect and automatically block security threats. We work hard to protect you and our services from unauthorized access, alteration, disclosure, or destruction of information. Measures implemented include but are not limited to:

We use strong encryption to keep your data private while in transit.
We encrypt data on all of our devices to keep your data private while at rest.
We continuously review our information collection, storage, and processing practices, including physical security measures, to prevent unauthorized access to our systems.
We restrict access to personal information to employees, contractors, and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined, terminated, and prosecuted if they fail to meet these obligations.

A cookie is a tiny piece of text sent to your browser by a website you visit. It helps the website to remember information about your visit, like your preferred language and other settings, and to recall who you are after having logged in.
You can set your browser to ask before allowing cookies or to not allow cookies at all. Refer to your browser's help to find out about the options available. Please be aware, that it is not possible to log on to our services or place an order with cookies fully deactivated.

This policy reflects our duties under the General Data Protection Regulation 2016 (GDPR). It describes how we use personal data (data that is about you) fairly, keep it secure, make sure it is accurate, and uphold your rights as a data subject. These rights are:

Information to be provided where personal data are collected from the data subject (Art. 13):
this means we must inform you how we are going to use your personal data. We do this through this privacy policy and by informing you how your data will be used each time we collect it.
Information to be provided where personal data have not been obtained from the data subject (Art. 14):
not applicable, all personal data will be obtained from the data subject
Right of access by the data subject (Art. 15):
You have the right to access your personal data that we hold. This is called a subject access request. We must respond to your request within one month.
Right to rectification (Art. 16):
If you think the data we hold on you is incorrect, please inform us so we can put it right.
Right to erasure ('right to be forgotten') (Art. 17):
You have the right to request that we delete your data. We will do so, provided that we do not have a compelling reason for keeping it.
Right to restriction of processing (Art. 18)
Notification obligation regarding rectification or erasure of personal data or restriction of processing (Art. 19)
Right to data portability (Art. 20):
You can obtain and reuse your personal data for your own purposes across different services.
Right to object (Art. 21):
You have the right to object to
- Direct marketing: you can opt out of direct marketing any time by following the instructions on how to unsubscribe included in any direct marketing message that we send to you.
- Any processing where our lawful basis is legitimate interest (see above). If you would like to formally object to any of our legitimate interest processing, please contact us.
Automated individual decision-making, including profiling (Art. 22):
This is not something we do at all. If that ever changes, this policy will be updated accordingly.

You can use the social media icons provided on our sites to post content and to comment on social networks. When you click on any of these icons, you will be directed to the respective site. That site will be registering that action and may use that information. Please refer to the respective policies of that site to see how exactly they use your information and to find out how to opt out or delete such information.

Details on data processing by Vendor / Service Provider:

We allow users to sign in to our services by using Sign in with Apple.

Some of our services including but limited to sending of marketing emails and our DNSBL run on AWS (AWS General Data Protection Regulation (GDPR) Center)

To allow faster and more reliable access to our websites and services we use CDN services provided by CDN77.

CDN services, DDoS protection, and DNS services are provided by Cloudflare.

DNS services are provided by ClouDNS.

Chat widget, support / helpdesk solution run on Crisp.chat by Crisp IM SAS.

Our own services including but not limited to email run on Google Workspace (Google Cloud Privacy Resource Center). All services are hosted in data centres located in the EU.
We allow users to sign in to our services by using Sign in with Google.

Most of our compute workload and our public sites and services run on cloud instances provided by Hetzner Online GmbH (Privacy Policy) in EU data centres (Finland + Germany)

We allow access to our services to users authenticated using their Microsoft Account.

Email security is provided by Proofpoint.

Invoicing customers for individual services, e.g. consulting services, and payments for these services including but not limited to credit card payments are handled by Stripe (Privacy Center).

Calender invidations are provided by zcal (Privacy Policy).

We use Zoom for meetings, video conferencing, and online events (Zoom and the European Union’s General Data Protection Regulation [GDPR]).

Please send formal complaints, feedback, and all other requests regarding data privacy and data protection in general to dataprivacy@threatint.com

Last updated: 2024-08-19 08:23:28 (UTC)