Privacy Policy
Last updated: 2024-01-01
Introduction
Welcome to SecBoard, an Information Security Management Platform. We are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our cybersecurity training, risk assessment, and incident management services.
Data We Collect
Personal Information
- Name and contact information
- Email address and phone number
- Job title and company information
- Account credentials and authentication data
Usage Data
- Training progress and assessment results
- Platform usage statistics and interactions
- IP address and browser information
- Session logs and security events
Security-Related Data
- Incident reports and security assessments
- Risk management data
- Asset inventory information
- Compliance tracking data
How We Use Your Data
Service Provision
- Provide cybersecurity training and education
- Conduct security assessments and risk analysis
- Manage security incidents and responses
- Track compliance with security policies
Platform Improvement
- Analyze usage patterns to improve our services
- Develop new security training modules
- Enhance platform security and performance
Data Protection and Security
Technical Safeguards
- End-to-end encryption
- Secure data transmission (HTTPS)
- Regular security audits
- Access controls and authentication
Organizational Measures
- Staff training on data protection
- Privacy impact assessments
- Data breach response procedures
- Regular compliance reviews
Your Data Rights
Access Rights
- Right to access your data
- Right to data portability
- Right to be informed
Control Rights
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to object
To exercise any of these rights, please contact our Data Protection Officer using the contact information below.
Contact Information
Supervisory Authority
If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.