Privacy

隐私政策

返回信任中心

我们的隐私政策

最后更新日期：2025 年 8 月 1 日

1. 概述

1.1
在 Secure Code Warrior，我们非常重视您的隐私，并认真履行我们的数据保护和隐私义务。本隐私政策旨在说明我们如何处理（或“加工”）您的个人数据，以及您享有的相关数据保护权利。它涵盖了我们所有的活动、产品和服务，包括：

  • Secure Code Warrior 学习平台（“SCW 学习平台”）
  • 附录 B 中列出的我们的网站（“网站”）
  • 社交媒体渠道（如 Twitter、Facebook、Instagram 和 YouTube）
  • 软件集成
  • 招聘

1.2
本隐私政策不涵盖第三方组织（例如我们的客户，或通过我们的网站或 SCW 学习平台链接到的第三方服务）的隐私实践，我们对此也不承担任何责任。有关第三方如何处理您个人数据的更多信息，请参阅各组织各自的隐私政策。

有关代表我们处理个人数据的第三方服务提供商（“处理者”或“子处理者”）的信息，请参阅第 3.4 节。

1.3
在本隐私政策中，当我们使用“我们”、“我们的”或“Secure Code Warrior”时，是指 Secure Code Warrior Inc、Secure Code Warrior Limited、Secure Code Warrior Pty Ltd、Secure Code Warrior BVBA 和 SCW ehf，它们共同构成本隐私政策附录 A 中列出的相关关联公司。

2. 数据收集

2.1

请参阅下表，了解我们处理哪些人的个人数据，以及各类数据主体对应的个人数据要素明细：

We process the personal data of… We may process your…
Website users
  • IP address
  • Cookie data (see cookie policy for more information)
Platform users
  • Phone number (trial users only)
  • Email address
  • Name (first and last)
  • Device information (browser type, device identifier and IP address)
  • Professional information (employer, team name, role, job title)
  • Location information (country/region and geo-location derived from IP address)
  • Platform performance metrics and assessment data
  • Cookie data (see cookie policy for more information)
  • Code commit metadata, including committer name/email (if Trust Agent is installed). Refer to this Knowledge Base article for more info.
Participants in tournaments, competitions or other promotional activities
  • Email address
  • Name (first and last)
  • Location information (country/region, unless postal address required for delivery of physical prize)
Software integration users
  • Product analytics and technical data related to use and interaction with our software integrations and API calls
  • Security vulnerability data
Trust Agent users
  • Code commit metadata, including committer name/email. Refer to this Knowledge Base article for more info.
  • [GitHub App only] SCW will inspect the contents of files modified in each commit to identify specific languages and frameworks in use. This data is discarded immediately after analysis and is never stored
Business contacts and representatives (such as customers, prospective customers, partners and suppliers)
  • Phone number
  • Email address
  • Name (first and last)
  • Professional information (employer, role, job title)
  • Location information (country/region)
Recruitment candidates
  • Phone number
  • Email address
  • Name (first and last)
  • Qualifications
  • Information contained in resume
Anyone who corresponds with us by post, email, social media or any other method This will vary depending on the method of communication, but will include any information that has not been withheld (such as your phone number, email address or display name) and any information you have purposefully disclosed in your correspondence with us.


2.2
Secure Code Warrior 通常在您直接与我们联系或沟通时收集个人数据。但在某些情况下，我们也可能通过第三方或其他方式收集您的信息。在某些情况下，我们可能会在向客户提供服务的过程中收到有关您的个人数据。我们还可能在合作伙伴向我们提供服务的过程中收到有关您的信息。

2.3
有关我们在网站和平台上使用 Cookie 的更多信息，请参阅我们的 Cookie 政策。

2.4
如果您不提供某些必要信息，我们可能会延迟或无法为您提供服务，或无法处理与我们处理您个人数据相关的请求/咨询。
‍

3. 使用与披露

3.1
当我们决定处理个人数据的目的和方式时，Secure Code Warrior 即为数据控制者。根据适用的数据保护和隐私法律，我们仅在拥有合法依据的情况下才会处理您的个人数据。

请参阅下表，了解我们处理您个人数据的原因及合法依据的摘要。如果您不是欧洲经济区 (EEA)/英国的数据主体，则上述处理的合法依据可能不适用，但我们处理数据的目的依然有效。

When processing your personal data is in our legitimate interest to…
Website users
  • provide, operate, maintain, improve, and promote our Websites and Services
  • enable you to access and use our Websites and Services
  • investigate and prevent fraudulent transactions, unauthorised access to our services, and other illegal activities
Platform users
  • carry out market research campaigns so that we can better understand the functionality of our platform and how we can improve our platform and services.
  • prepare statistics on how our users engage with our platform and services to better understand and improve them.
  • provide customers with metrics and visualisations related to the training performance of their users
  • record and review customer service communications for training and performance improvements to enable us to improve customer services
  • receive and respond to communications and requests
  • create marketing cohorts based on the analytics information generated by our platform
Business contacts and representatives (such as customers, prospective customers, partners and suppliers)
  • send and receive business communications
  • administer our relationship
  • inform prospective customers and contracts about our services
  • send promotional and marketing materials related to the services you have purchased
Recruitment candidates
  • consider applications for roles for which you may have applied
  • negotiate employment opportunities
  • obtain references from former employers
Anyone who corresponds with us by post, email, social media or any other method
  • respond to you and follow up with related/requested information at a later date
When processing is necessary…
Business contacts and representatives (such as customers, prospective customers, partners and suppliers)
  • for the performance of a contract to which you are party
  • in order to take steps prior to entering into a contract
We have your consent to…
Website users
  • send promotional and marketing materials about us and our partners
  • monitor and analyse trends, usage, and activities in connection with our website and services for promotional and marketing purposes
  • personalise our website and services, including by providing features or advertisements that match your interests and preferences
Platform users
  • send promotional and marketing materials about us and our partners
Participants in tournaments, competitions or other promotional activities
  • send promotional and marketing materials about us and our partners
  • send you a physical prize
Business contacts and representatives (such as customers, prospective customers, partners and suppliers)
  • send promotional and marketing materials about us and our partners

3.2
我们仅会在以下情况下处理您的个人数据：a) 上述列出的目的，或 b) 您合理预期我们使用该数据的其他相关兼容目的（且在此类情况下，合法依据也保持一致）。我们亦可能出于其他目的处理您的个人数据，但仅限于您已明确表示同意的情况下。

3.3
您始终可以选择退订营销材料。您可以通过点击我们邮件中包含的“退订”链接，或通过发送邮件至 support@securecodewarrior.com 与我们联系。

3.4
Secure Code Warrior 可能会为了实现上述目的而披露您的个人数据。这包括根据您与我们的关系，将您的个人数据与我们企业集团的其他成员（附录 A）以及下述类别的第三方服务提供商（“处理者”）共享：

‍

We share personal data with processors who assist with and enable…
The hosting of our website, products/service, infrastructure and related databases
Product/service support, feedback and feature requests
Email communications and consent management
Analytics for our products/services, and our sales and marketing teams
Delivery of physical and virtual prizes or rewards

有关我们为代表客户处理个人数据而聘请的第三方服务提供商（“子处理者”）名单，请参阅： https://www.securecodewarrior.com/trust/sub-processors 


3.5

Secure Code Warrior may also disclose your personal data:

a) to specialist advisers who have been engaged to provide us with legal, accounting, administrative, financial, insurance, research, marketing or other services;
b) to law enforcement bodies and/or any other relevant supervisory/data protection authorities which may have a reasonable requirement to access your personal data; and
c) to any other person authorised and specified by you.
d) where required or authorised by or under the applicable data protection law or an order of a court or tribunal;
e) in accordance with the applicable data protection law, including where we hold a reasonable belief that the processing or disclosure is required for certain enforcement or health and safety purposes, or that processing or disclosure is necessary in relation to certain suspected unlawful activity or misconduct;
f) whilst negotiating any takeover, purchase, merger, joint venture, partnership or other similar arrangement; or
g) if reasonably necessary for the establishment, exercise or defence of a legal or equitable claim or for the purposes of confidential alternative dispute resolution.

3.6
在其他情况下，我们可能会就特定服务的额外披露事项通知您。
‍

4. 个人数据的国际传输

4.1
鉴于我们的业务性质和企业结构，我们可能会在国际范围内将您的个人数据披露给我们的关联公司（附录 A）或外部服务提供商（第 3.4 节），以提供和改进我们的服务。如果接收方所在地区未提供同等水平的隐私和数据保护立法，我们将确保采取充分的保障措施来保护您的个人数据。

有关个人数据传输的信息，请参阅我们的个人数据国际传输页面，或联系support@securecodewarrior.com

4.2
Secure Code Warrior Inc. 遵守美国商务部制定的《欧盟-美国数据隐私框架》、英国对《欧盟-美国数据隐私框架》的扩展协议以及《瑞士-美国数据隐私框架》（统称为“数据隐私框架”或“DPF”），并且我们已向美国商务部证明，我们遵守各项 DPF 的相应原则，以处理从欧盟、英国和瑞士接收的个人数据。

美国联邦贸易委员会 (FTC) 对 Secure Code Warrior Inc. 以及我们对《欧盟-美国数据隐私框架》(EU-U.S. DPF)、英国对《欧盟-美国数据隐私框架》的扩展协议以及《瑞士-美国数据隐私框架》(Swiss-U.S. DPF) 的合规性拥有管辖权。对于因依赖《欧盟-美国数据隐私框架》、英国对《欧盟-美国数据隐私框架》的扩展协议以及《瑞士-美国数据隐私框架》而接收的个人数据处理所引发的未决投诉，Secure Code Warrior 承诺分别与欧盟数据保护机构 (DPA)、英国信息专员办公室 (ICO) 以及瑞士联邦数据保护和信息专员 (FDPIC) 所设立的专门小组进行合作并遵守其建议。

如果本隐私政策中的条款与相关的 DPF 原则之间存在任何冲突，应以 DPF 原则为准。当我们根据 DPF 接收信息并将其传输给代表我们行事的第三方服务提供商时，如果他们以不符合 DPF 的方式处理信息，且我们应对导致损害的事件负责，我们仍将承担责任。

如果您对我们遵守 DPF 原则的情况有任何投诉，请参阅下文第 9 节，了解如何联系我们或我们的监管机构。

如需了解更多关于 DPF 项目的信息并查看我们的认证，请访问
https://www.dataprivacyframework.gov/

5. 存储与安全

5.1
我们可能会以多种不同格式（现场或异地）持有您的个人数据，包括软件程序、数据库、文件系统和备份存储。

5.2
有关我们如何保护您数据的更多信息，请访问我们的信任中心。
‍

6. 数据保留

6.1
我们的数据保留期限取决于您与我们的关系。详情请参阅下表。

If you are a… Unless otherwise requested, we will retain your personal data…
Website users For twelve (12) months from the date of our last contact with you
Platform users While you have access to our platform, then for a following twelve (12) months
Participants in tournaments, competitions or other promotional activities For the duration of the event or promotion, then for a following twelve (12) months
Prospective customers For twenty-four (24) months from the date of our last contact with you
Business contacts and representatives (such as customers, partners and suppliers) For seven (7) years from the date of our last contact with you
Recruitment candidates For twelve (12) months for unsuccessful candidates
Anyone who corresponds with us by post, email, social media or any other method For twelve (12) months from the date of our last contact with you


6.2
如果我们收到并非向我们索取或错误发送给我们的个人数据，我们将尽快删除并销毁该信息。如果该信息是为申请我们公司职位而发送的，在征得您同意的情况下，我们可能会根据上表中的保留期限保留此信息。

7. 您的权利

7.1
您可能拥有与个人数据相关的某些权利，包括：

a) request access to your personal data;
b) request correction of the personal data that we hold about you as described below;
c) where required by law, request erasure of your personal data where there is no good reason for us continuing to process it or where you have exercised a right to object to processing (see (d) below);
d) object to processing of your personal data where we are relying on a “legitimate interest” (or the interests of a third party) and there is no compelling reason for us to continue processing your personal data;
e) object to processing your personal data for direct marketing purposes;
f) object to automated decision-making including profiling by us using your personal data which has a legal effect or similar significant effect on you;
g) request the restriction of processing of your personal data (for example, to suspend the processing of your personal data due to inaccuracy or our stated reason for processing it);
h) request that we provide you or a third party the personal data we hold regarding you in an electronically useable format; and
i) withdraw your consent for those purposes where we rely on consent, in which case we will no longer process your information for the purpose or purposes to which you originally consented, unless we have another lawful basis for doing so.

7.2
请注意，上述权利并非绝对，可能会因适用的数据保护法律而异，且我们可能无法（全部或部分）满足您的请求。如果我们合理认定您的请求明显缺乏依据，我们保留拒绝满足该请求的权利。在此情况下，我们将向您说明拒绝的理由。

7.3
如果您希望行使有关个人数据的权利，请通过 support@securecodewarrior.com 与我们联系。我们将在合理时间内处理您的请求，并自收到之日起一个月内予以回复。对于特别复杂的请求，我们可能需要将此期限延长最多两个月，但我们会及时通知您。

7.4
如果您对我们处理个人数据的方式有任何不满，您有权向所在国家的数据保护监管机构投诉（详情请参阅第 9.2 节），但我们建议您首先通过 support@securecodewarrior.com 与我们联系。

8. 隐私政策的变更

8.1
本隐私政策最后更新于 2025 年 3 月 23 日。

8.2
我们可能会不时通过在网站上发布修订版本或以额外通知补充条款的方式修改隐私政策。任何变更自发布之日起生效。如果本隐私政策发生重大变更，我们可能会采取额外的合理措施通知您。

9. 联系方式

9.1
如果您有任何关于隐私的问题，希望访问或更正您的个人数据，或提出投诉，请通过 support@securecodewarrior.com

9.2
如需了解更多关于数据保护原则和义务的信息，或向我们的监管机构投诉，请访问以下网站：

  1. Office of the Australian Information Commissioner (Australia) - www.oaic.gov.au
  2. European Data Protection Board (EU/EEA) - https://edpb.europa.eu/edpb_en
  3. Information Commissioner’s Office (UK) - www.ico.org.uk
  4. Federal Data Protection and Information Commissioner (Switzerland) - https://www.edoeb.admin.ch/edoeb/en/home.html

9.3
如果您对我们遵守 DPF 原则的情况有任何投诉（见上文第 4.2 节），您可以：

  1. Contact us directly at support@securecodewarrior.com
  2. Contact the free independent recourse mechanism listed under ‘Dispute Resolution’ on our DPF certification page.
  3. Contact your local data protection authority (see Section 9.2 above).
  4. Contact the U.S. Federal Trade Commission (FTC) using their report service.
  5. If (1) to (4) have been exhausted with no resolution, you may also invoke binding arbitration via the International Centre for Dispute Resolution.

附录 A - SECURE CODE WARRIOR 实体

SCW Entity Incorporation Company No Address
Secure Code Warrior Ltd England and Wales 08559432 Ironstone House
4 Ironstone Way
Brixworth
Northampton
NN6 9UD
Secure Code Warrior Inc. Delaware (U.S.A) - 265 Franklin st. Suite 1702
Boston
MA 02110
Secure Code Warrior BVBA Belgium - Baron Ruzettelaan 5
bus 3 8310 Brugge
Secure Code Warrior Pty Ltd New South Wales (Australia) 608 498 639 (ACN) C/- Level 3
360 Kent Street
Sydney 2000
SCW ehf Iceland - Katrinartun 4
105 Reykjavik

‍

附录 B - SECURE CODE WARRIOR 网站

www.securecodewarrior.com

help.securecodewarrior.com

learn.securecodewarrior.com

portal.securecodewarrior.com

我们的安全与隐私方针

请访问我们的信任中心，深入了解我们如何通过安全与隐私实践，保护我们及客户的信息资产免受滥用、非法使用或泄露。

访问信任中心