Data Processing Addendum

Appendix B - Collection of Personal Information

a. PLATFORM USER

1. User email address (username) 
2. First Name, Last Name
3. Employer/Company Name/ Team name
4. Test results /Metrics information/Assessment data
5. IP Address (Anonymised)
6. Machine ID (Anonymised)
7. Geo-location (derived from IP)
8. Password 
9. Roles/Job Title
10. Inviter details (email address of inviter/First Name/Last Name)
11. Country/Region
12. Browser Type
13. Phone Number*
    
    

* Only required for Trial Users

Whilst you have access to our platform, and thereafter for a period of 12 months, unless otherwise agreed.

CUSTOMERS

1. Name
2. Business Email Address
3. Phone Number
4. Employer/Company Name
5. Job Title
6. Billing address 
7. Company/Tax Registration Number

We will retain this information in accordance with applicable laws and our privacy policy for a period of 7 years from the date of our last contact with  you unless, where you are entitled, request that we delete this information.

‍
PRospects / leads

1. Name
2. Business Email Address
3. Phone Number
4. Employer/Company Name
5. Job Title
6. Physical Location

We will retain this information for a period of 24 months from the date of our last contact with you unless, where you are entitled, request that we delete this information.

PARTICIPANTS IN TOURNAMENTS AND / OR COMPETITIONS: Registrant / participant

1. Name
2. Email address
3. Physical address in circumstances where there may be a physical prize to be delivered
4. Country/Region

We will retain this information for the duration of the Competition, and for a period of 12 months from the date of our last contact with you unless, where you are entitled, request that we delete this information

SUPPLIER

1. Name
2. Business/Company Name
3. Email Address
4. Phone Number
5. Bank Details
6. Billing address 
7. Company/Tax Registration Number

We will retain this data for up to 7 years from our last contact with you, unless you request that we delete the data beforehand.

recruitment candidates

1. CV/ Resume
2. Phone Number
3. Date of Birth
4. Qualifications
5. Email address
6. Physical address (if provided)

For unsuccessful we will retain this data for a period of twelve (12) months so that we may contact you regarding any future opportunities, unless you request that we delete the data beforehand.

Website visitor

1. Name³
2. Contact information³ (company, role/title, business email address and phone number)
3. IP Address¹
4. Cookie Data¹ ²

¹ When you communicate with us through our websites:
We use Drift as one of our chatbots to allow customers to interact with us through our websites. Drift will only use the IP address for data enrichment, i.e. to determine if it is associated with a business to provide Secure Code Warrior with information such the industry and # of employees of the business. 

Drift will only use cookies to track the activities of site visitors within Secure Code Warrior’s sites, e.g. whether they visited a particular product page or the pricing page before engaging with the messaging widget. Drift will NOT track users across domains or build profiles.

² Cookiebot

We use Cookiebot to manage all cookies across our websites. Cookiebot allows Secure Code Warrior to:

• Enable prior consent.
• Provide clear and specific information about data types and purpose of the cookies.
• Fully document all given consents.
• Allow our visitors to reject superfluous cookies and still use our websites.
• Allow our visitors to withdraw their consent whenever they want.

³ Information is collected after consent is given

Refer to our cookie policy

We will retain this data for a period of 12 months from the date of our last contact with you unless, where you are entitled, request that we delete this information.

Appendix C - Purposes for which we process your personal information, and the lawful basis on which we carry out such processing

1. PLATFORM USER

1.Necessary to enable us to perform our contract with you: 

• to set up, administer and manage a user’s account, verify a user’s identity, provider users with our platform and services, and to receive and respond to a user’s communications and requests.
• to notify our users of updates to our platform and services necessary for the performance of the contract we have with you.
• to support any other purpose necessary for performance of our contractual obligations or specifically stated at the time at which you provided your personal information.
  

2. Necessary for the performance of our contract with you where such communication relates specifically to our services, and legitimate interest to be able to handle such queries: 

• to receive and respond to a user’s communications and requests.
  

3.  For legitimate interest to enable Secure Code Warrior to: 

• carry out market research campaigns so that we can better understand the functionality of our platform and how we can improve our platform and our services.
• prepare statistics relating to the use of our platform and services by our users so that we can understand the use of, and improve our platform and services.
  

4. For legitimate interests to allow Secure Code Warrior to improve customer services offering: 

• to record and review customer service communications for training and performance improvements to enable us to improve customer services.
• To enable Secure Code Warrior to comply with legal obligations.
  

5. With consent: 

• to send users marketing materials where marketing materials have been specifically requested.

2. Customers

1. Necessary for the performance of a contract 

• conducting business and make our services available to customers,
  

2. For legitimate interests to enable Secure Code Warrior to conduct business 

• to send and receive business communications
• to administer our relationship with customers, prospective customers and business contacts
  

3. For legitimate interests to contact those who may benefit from our services 

• informing prospective customers and business contacts about our services.
  

4. With consent 

• to send out marketing materials where these have been specifically requested.

3. email contact / prospective customer

1.For legitimate interests to enable Secure Code Warrior to conduct business 

• to send and receive business communications
• to administer our relationship with customers, prospective customers and business contacts
  

2. For legitimate interests to contact those who may benefit from our services 

• informing prospective customers and business contacts about our services.
  

3. With consent 

• to send out marketing materials where these have been specifically requested.

‍
4. participants in tournaments and / or competitions: registrant / participant

1. Necessary for the performance of our contract with you, namely  for the running of the competition and/ or tournament

2. With consent: to send out marketing materials

‍

5. SUPPLIER

1. For legitimate interests to enable Secure Code Warrior for the performance of a contract where the supplier is an individual

• to assess and appoint suppliers
• Legitimate interests to conduct business 
  

2.   To send and receive business communications.

3.  To administer our relationship with our suppliers.

6. recruitment candidates

To enable Secure Code Warrior to recruit employees and assess potential candidates, that is to: 

• consider applications for roles for which you may have applied, directly or via a recruitment, and the negotiation of employment opportunities,
• consider applicants for other roles within Secure Code Warrior for which they may be suited,
• obtain references from former employers.

7. website visitor

For legitimate interest to enable Secure Code Warrior to,

• provide, operate, maintain, improve, and promote our Websites and Services;
• enable you to access and use our Websites and Services;
• send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events; and provide other news or information about us and our partners (you can opt-out of receiving marketing communications from us by unsubscribing from any communication we send you);
• monitor and analyze trends, usage, and activities in connection with our Websites and Services and for marketing or advertising purposes;
• investigate and prevent fraudulent transactions, unauthorized access to our Websites and Services, and other illegal activities;
• personalize our Websites and Services, including by providing features or advertisements that match your interests and preferences; and for other purposes for which we obtain your consent.

Appendix D - Secure Code Warrior Related Websites

1. securecodewarrior.com
2. help.securecodewarrior.com
3. discover.securecodewarrior.com
4. leadersinappsec.com
5. leadersindevsec.com
6. softwaresecuritygurus.com
7. scw.io
8. learn.securecodewarrior.com