Privacy policy

1. PRIVACY NOTICE OBJECTIVE

This privacy notice will explain you about what we collect and do with your personal.

Your privacy is important to us and our organization (SecurEyes Infusing Security) respects your rights to data privacy. This privacy notice explains how we collect your personal data and used for which purpose and how we secure your personal data and how you can exercise your data subject and data privacy rights.

When you visit our website or interact with us and we gather your personal information to provide access to our products and services.

SecurEyes is a global cyber security company servicing multiple customers across geographies. SecurEyes with its highly skilled employees and a global network of partners and vendors provides specialized cyber security advisory & consulting services including Cyber Security Assessment Services, Cyber Security Managed Services, Cyber Security Governance, Risk and Compliance Services, among others.

2. CONTROLLER’S CONTACT DETAIL

SecurEyes Infusing security is the controller for the personal information which we collect and process. If you want to exercise your privacy rights and know about what information we hold about you.

You can contact us via E-mail and post at the below details:

Our Corporate Office Address: Attention: DPO SecurEyes 4th Floor, Delta Block, Sigma Soft Tech Park, Whitefield Main Road,Varthur Post, Bangalore, Karnataka – 560066 Email: dpo@secureyes.net

3. PERSONAL DATA WE COLLECT

We collect data directly through the interactions with you via online forms or E-platforms or when you visit our website https://secureyes.net

We collect your name, job title, organization, email address, telephone number and application details, etc. when you fill a form on this web site mainly information that is necessary for delivering you a product/service or to enhance your customer experience with us. We may collect your personal data which is available publicly. We require your personal data to communicate our product services and offering.

4. HOW WE USE PERSONAL DATA

• Information to respond to any query you have sent us.
• Providing you with other products and services that you have requested.
• Providing you with promotional items at your request and communicating with you in relation to those products and services.
• Communicating and interacting with you; and notifying you of changes to any services.
• Enhance your customer experience.
• To measure your interest in the various areas of our site and improve the usability of www.secureyes.net.

5. HOW TO CONTROL AND ACCESS YOUR PERSONAL DATA

You can access and control your personal data that SecurEyes Infusing Security holds from you by contacting or submitting a Data Subject Access Request (DSAR) form to the SecurEyes Infusing security.

• We obtained your consent to use your personal data, you can withdraw that consent at any time.
• You can request access to, erasure of, and updates to your personal data.
• You have a right to ask for a copy of the information we hold on you at any time.
• You can also object to or restrict of personal data used for direct marketing purpose or we are performing a task in public interest or pursuing our legitimate interest.
• You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

6. HOW WE PROTECT YOUR PERSONAL DATA

We do our best to keep your Personal Data safe. SecurEyes has implemented appropriate physical, electronic and procedural controls to protect personal information from loss, misuse, alteration, or destruction.

Only authorized SecurEyes representatives are provided access to personally identifiable information, and they are required to treat this information as confidential.

We use safe protocols for communication and transferring data (such as HTTPS). We use anonymizing and pseudonymizing where suitable. We monitor our systems for possible vulnerabilities and attacks.

7. INDIVIDUAL DATA SUBJECT ACCESS RIGHTS

You can access your Data privacy rights by directly contacting us or by filling a DSAR form:

Right to transparency: We as a Data Controller use clear and plain language when informing data subjects about how their personal data will be processed. The information provided to data subject will be clear, concise, and transparent, and it will be provided to them in an easily accessible format.

Right to be informed: Data subject have the right to be informed. For example – About the fact that their data has been processed, the purpose for which it was processed and the identity of the controller. We will provide this through a Data Protection Notice to their data subjects whose personal data is processing

Right to access: Data Subjects have the right to receive information from Data Controllers on whether their personal data is processed by their contractor or processor, the purpose of this processing, the categories of data concerned and the recipients to whom their data are disclosed, the storage period, as well as the right to access this personal data.

Right to rectification: Data subjects have the right to rectify their data if it is inaccurate or incomplete.

Right to erasure / Right to be forgotten: Data subjects have the right to erase their data for example if their personal data is no longer needed by the Data Controller if they withdraw their consent or if the processing operation is unlawful.

Right to restrict the processing: Data subjects can ask the controller to restrict the data processing under certain circumstances, such as if they contest the accuracy of the processed data or if they are not sure if their data is lawfully processed.

Right to data portability: Data subjects have the right to obtain the data that the controller holds on them and to transfer it from one controller to another. Where technically possible, the controller has to do this directly.

Right to object: Data subjects can object, on compelling legitimate grounds, to the processing of data relating to them.

Rights not to be subject to automated decision making and profiling: Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, which results in legal consequences for them or significantly affects them in a similar way.

8. OUR DATA PRIVACY PRINCIPLES

We operate in multiple jurisdictions and to maintain global privacy posture and maximum legal compliance we have our privacy principles based on OECD guidelines, which also serves as founding principles for laws including however not limited to EU GDPR, UK DPA2018, CCPA, and PDPA.

The OECD Privacy guidelines are high-level policy recommendations that can be used as a basis to develop a privacy protection framework with the flexibility to accommodate regional and local variations. Meanwhile, they also facilitate international interoperability for transborder flows of personal data.

We at SecurEyes follow the following principles in our “Data Privacy & Protection” practices and our controls are regularly evaluated for:

• Collection Limitation Principle There shall be limits to the collection of personal data and any such data should be obtained by lawful and fair means and, where appropriate, with the knowledge or consent of the data subject.
• Data Quality Principle Personal data should be relevant to the purposes for which they are to be used, and, to the extent necessary for those purposes, should be accurate, complete and kept up to date
• Purpose Specification Principle The purposes for which personal data are collected should be specified not later than at the time of data collection and the subsequent use limited to the fulfilment of those purposes or such others as are not incompatible with those purposes and as are specified on each occasion of change of purpose.
• Use Limitation Principle Personal data shall not be disclosed, made available or otherwise used for purposes other than those specified in accordance with (the Purpose Specification Principle) except: a) with the consent of the data subject; or b) by the authority of law.
• Security Safeguards Principle Personal data should be protected by reasonable security safeguards against such risks as loss or unauthorized access, destruction, use, modification or disclosure of data.
• Openness Principle There should be a general policy of openness about developments, practices and policies with respect to personal data. Means should be readily available of establishing the existence and nature of personal data, and the main purposes of their use, as well as the identity and usual residence of the data controller.
• Individual Participation Principle An individual should have the right:br> a) to obtain from a data controller, or otherwise, confirmation of whether or not the data controller has data relating to him. b) To have communicated to him, data relating to him within a reasonable time at a charge, if any, that is not excessive; in a reasonable manner; and in a form that is readily intelligible to him. c) To be given specific reasons if a request made under point (a) and (b) is denied, and to be able to challenge such denial. d) To challenge data relating to him/her and, if the challenge is successful to have the data erased, rectified, completed or amended.
• Accountability Principlebr> A data controller should be accountable for complying with measures which give effect to the principles stated above.

9. COOKIES AND OTHER TECHNOLOGIES WE USE

We use cookies and/or similar technologies to analyses customer behavior, administer the website, track users’ movements, and to collect information about users. This is done in order to personalize and enhance your experience with us.

A cookie is a tiny text file stored on your computer. Cookies store information that is used to help make sites work. Only we can access the cookies created by our website. You can control your cookies at the browser level. Choosing to disable cookies may hinder your use of certain functions.

• Necessary cookies – These cookies are required for you to be able to use some important features on our website, such as logging in. These cookies do not collect any personal information.
• Functionality cookies – These cookies provide functionality that makes using our service more convenient and makes providing more personalized features possible. For example, they might remember your name and e-mail in comment forms, so you do not have to re-enter this information next time when commenting.
• Analytics cookies – These cookies are used to track the use and performance of our website and services.
• Advertising cookies – These cookies are used to deliver advertisements that are relevant to you and to your interests. In addition, they are used to limit the number of times you see an advertisement. They are usually placed to the website by advertising networks with the website operator’s permission.

10. LINKS TO OTHER WEBSITES

Where we provide links to websites of other organizations, this privacy notice does not cover how those organization processes their personal information. We encourage you to read the privacy notice on the other websites you visit or links redirect to their websites.

Last updated on – 22nd Aug 2021 Version 2.0