1. Data controller and contact details

Cyber Detector ApS is the data controller when we decide why and how personal data is processed, for example when you use our website, contact us or request a partner demo.

We use the term privacy contact rather than Data Protection Officer because DPO contact details are only required where a DPO has formally been appointed.

2. When we act as controller or processor

Cyber Detector may act either as a data controller or as a data processor, depending on the context.

• We act as data controller for our website, sales, partner administration, customer relationship management, billing, security and our own marketing activities.
• Where personal data is processed within CyberLearn solely on behalf of a customer or partner, we act as data processor. The relevant customer or partner is normally the data controller and its privacy information applies to that processing.

3. Personal data we collect

When you contact us or request a demo

We may collect your name, work email, telephone number, company, country, company type, customer portfolio, message, consent record and other information you choose to provide.

When you are a partner, customer or business contact

We may process professional contact details, account and user information, support correspondence, agreement details, service usage information, invoices and payment related records.

When you use our website

We may collect IP address, device and browser information, timestamps, pages visited, referral information, cookie identifiers, consent choices and security logs.

Sources

We receive data directly from you, from your employer or organisation, from an authorised partner or administrator, and automatically through website and service technologies.

4. Purposes and legal bases

Where processing relies on legitimate interests, we consider the purpose, necessity and impact on your rights before processing.

5. Sharing and service providers

We do not sell personal data. We may share personal data when necessary with:

• Hosting, cloud, email, CRM, support, analytics and security providers.
• Professional advisers such as accountants, auditors, lawyers and insurers.
• Partners or customers where needed to route a request or deliver an agreed service.
• Public authorities, courts or law enforcement where required by law.
• A buyer, investor or adviser in connection with a reorganisation, merger or sale, subject to appropriate safeguards.

Service providers that process personal data on our behalf are required to follow our instructions, protect the data and comply with applicable data protection requirements.

6. International data transfers

Some service providers may process personal data outside Denmark or the European Economic Area. Where personal data is transferred to a country without an EU adequacy decision, we use an approved transfer mechanism such as the European Commission Standard Contractual Clauses and, where appropriate, supplementary safeguards.

7. How long we retain personal data

• Inquiry and demo request data is retained for as long as needed to respond, follow up and document the request, after which it is deleted or anonymised according to our retention schedule.
• Partner and customer records are retained during the relationship and afterwards for as long as needed for contractual, support, security and legal claim purposes.
• Accounting records are generally retained for five years from the end of the financial year to which they relate, unless a longer period is required.
• Marketing data is retained until consent is withdrawn, you object, or the information is no longer relevant. We may retain a limited suppression record to respect your opt-out.
• Cookie retention periods are shown in the website cookie banner or cookie declaration.

8. Cookies and marketing

Necessary cookies may be used without consent where they are required to provide a service you have requested or maintain website security. We ask for consent before using non-essential cookies for preferences, statistics or marketing.

You can change or withdraw your cookie choices through the cookie settings link available on this website.

We send electronic marketing only where permitted by applicable law. You can unsubscribe through the link in a marketing email or contact us at contact@cyber-detector.com.

9. Security and automated decisions

We use technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, disclosure and destruction. Measures are reviewed according to risk and may include access controls, encryption, logging, backup, supplier controls and staff procedures.

We do not use personal data collected through ordinary website forms to make solely automated decisions that produce legal or similarly significant effects.

10. Your data protection rights

Depending on the circumstances, you may have the following rights:

To exercise a right, contact contact@cyber-detector.com. We may request information necessary to verify your identity.

11. Complaints and policy updates

Please contact us first if you have concerns about our use of personal data. You also have the right to complain to the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
File a complaint with Datatilsynet

We may update this policy when our processing, services, suppliers or legal obligations change. The latest version and update date will be published on this page.