Data Processing Addendum

Appendix A - Secure Code Warrior Legal Entities

a. UNITED KINGDOM (incorporated in England and Wales)
   Secure Code Warrior Limited
   Company Number 08559432
   Ironstone House
   4 Ironstone Way
   Brixworth, Northampton. NNG 9UD
   United Kingdom

b. AUSTRALIA
   Secure Code Warrior Pty Limited
   ABN 97 608 498 639
   c/o Vital Addition
   5, 120 Sussex Street
   Sydney. NSW 2000
   Australia

c. BELGIUM
   Secure Code Warrior BVBA
   Baron Ruzettelaan 5
   bus 3 8310 Brugge
   Belgium

d. USA
   Security Code Warrior Inc
   265 Franklin Street, Suite 1702
   Boston MA 02110
   USA

e. ICELAND
   Motherji ehf
   Borgatun 24, 105,
   Reykjavik,
   Iceland

Appendix B - Collection of Personal Information

a. PLATFORM USER

As a user of the Secure Code Warrior platform we will hold the following information about you

1. User name
2. Password
3. Employer
4. Job title
5. Location
6. Test results
7. IP Address
8. IMEI number
9. MAC Address
10. Browser type

This personal information will be held about you for so long as you have access to our platform and thereafter for a further period of twelve (12) months or as specified in your employers contract with us (whichever is the lower).

‍

RECRUITMENT CANDIDATES

As potential employee of Secure Code Warrior we hold the following information about you:

1. Contact details
2. CV
3. Date of Birth
4. Qualifications
5. References

Should you be unsuccessful we will retain this data for a period of twelve (12) months so that we may contact you regarding any future opportunities, unless you request that we delete the data beforehand.

‍
CUSTOMERS

As an email contact or prospective customer to Secure Code Warrior we hold the following information about you:

1. Name
2. Contact details
3. Employer
4. Job Title
5. Location

We will retain this data for up to 7 years from our last contact with you, unless you request that we delete the data beforehand.

‍

PARTICIPANTS IN TOURNAMENTS AND OR COMPETITIONS

As a registrant, or participant in a tournament or competition we hold the following information about you:

1. Name
2. Email address
3. Physical address where there may be a prize to be delivered
4. Region

This personal information will be held about you for so long as you have access to our platform and thereafter for a further period of twelve (12) months.

‍

SUPPLIERS

As a supplier to Secure Code Warrior we hold the following information about you:

1. Name
2. Business/ Company Name
3. Contact details
4. Bank Details (if acting as a sole trader or using a personal account)
5. We will retain this data for up to 7 years from our last contact with you, unless you request that we delete the data beforehand.

‍

Appendix C - Processing of Personal Information

a. PLATFORM USER

Necessary to enable us to perform our contract with you:

1. to set up, administer and manage a user’s account, verify a user’s identity, provider users with our platform and services, and to receive and respond to a user’s communications and requests.
2. to notify our users of updates to our platform and services necessary for the performance of the contract we have with you.
3. to support any other purpose necessary for performance of our contractual obligations or specifically stated at the time at which you provided your personal information.

Necessary for the performance of our contract with you where such communication relates specifically to our services, and legitimate interest to be able to handle such queries:

1. to receive and respond to a user’s communications and requests.

For legitimate interest to enable Secure Code Warrior to:

1. carry out market research campaigns so that we can better understand the functionality of our platform and how we can improve our platform and our services.
2. prepare statistics relating to the use of our platform and services by our users so that we can understand the use of, and improve our platform and services.

For legitimate interests to allow Secure Code Warrior to improve customer services offering:

1. to record and review customer service communications for training and performance improvements to enable us to improve customer services.

To enable Secure Code Warrior to comply with a legal obligation:

1. to enable Secure Code Warrior to comply with legal obligations.

With consent:

1. to send users marketing materials where marketing materials have been specifically requested.

‍

RECRUITMENT

To enable Secure Code Warrior to recruit employees and assess potential candidates, that is to:
consider applications for roles for which you may have applied, directly or via a recruitment, and the negotiation of employment opportunities,
consider applicants for other roles within Secure Code Warrior for which they may be suited,
obtain references from former employers.

‍
CUSTOMERS, PROSPECTIVE CUSTOMERS or BUSINESS CONTACTS

Necessary for the performance of a contract

1. conducting business and make our services available to customers,

For legitimate interests to enable Secure Code Warrior to conduct business

1. to send and receive business communications
2. to administer our relationship with customers, prospective customers and business contacts

For legitimate interests to contact those who may benefit from our services

1. informing prospective customers and business contacts about our services.

With consent

1. to send out marketing materials where these have been specifically requested.

‍
PARTICIPANTS IN TOURNAMENTS AND OR COMPETITIONS

Necessary for the running of the competition and/ or tournament
With consent

1. to send out marketing materials

‍

SUPPLIERS

for legitimate interests to enable Secure Code Warrior for the performance of a contract where the supplier is an individual

1. to assess and appoint suppliers

Legitimate interests to conduct business

1. to send and receive business communications
2. to administer our relationship with our suppliers.

Appendix D - Secure Code Warrior Related Websites

1. securecodewarrior.com
2. help.securecodewarrior.com
3. insights.securecodewarrior.com
4. discover.securecodewarrior.com
5. leadersinappsec.com
6. leadersindevsec.com
7. softwaresecuritygurus.com
8. scw.io