👤 Who are these?‍

• People who interact with our information security content by e.g.
  
  • downloading a guide (e.g. “Most relevant infosec frameworks in Belgium”)
  • registering for a live or on-demand webinar
  • get any other content from our website (e.g. checklist, playbook)
  • people who interact with us at in-person events (e.g. Cyber security nordic)

ℹ️ Source of personal data‍

• Data subject: information you provide us via a form

🧑‍🔧 Purposes of processing personal data‍

• Delivery of requested content
  
  • legal basis: contract
• Time-limited follow-up regarding interacted content and directly related services
  
  • legal basis: legitimate interest
    
    • direct relation to the downloaded content
    • b2b compliance professionals as audience
    • all emails include clear opt-outs with immediate effect
    • communication is time-limited - only when this was a relevant topic for you (upcoming weeks from the interaction)
    • you won't be added to continuous newsletters or receive any marketing of unrelated services.
  • We won't disclose or sell any of this data for any other use or parties.

🫆 Personal data involved‍

• Basic contact info (name, email, company, role)
• Interaction data (different downloads, webinar attendance)
• Marketing engagement data

🏢 Recipients of personal data

🗑️ Personal data storage

• Livestorm (webinar system), EU
• HubSpot (CRM / marketing / email communication), US (EU-US Data Privacy Framework)

• ‍‍Your data will stay active for 6 weeks after your interaction
• Other data is regularly removed

👤 Who are these?‍

• People who subscribe for our recurring communication
  
  • explicitly subscribe for our weekly newsletter (https://cyberday.ai/subscribe)
  • subscribe for newsletter while interacting with other content (e.g. webinars or guides) by checking an additional email newsletter subscription box
  • are Cyberday users in key roles (admin, core team) in their organization's Cyberday accounts

ℹ️ Source of personal data‍

• Data subject: information you provide us via a form

🧑‍🔧 Purposes of processing personal data‍

• Weekly recurring communication (related to Cyberday product, related services or information security and compliance in general)
  
  • legal basis: consent
  • all emails include clear opt-outs with immediate effect

🫆 Personal data involved‍

• Contact info (usually just email + optional name/company)
• Email subscription preferences
• Email engagement analytics (opens, clicks)

🏢 Recipients of personal data

🗑️ Personal data storage

• Livestorm (webinar system), EU
• HubSpot (CRM / marketing / email communication), US (EU-US Data Privacy Framework)

• ‍‍Your data will stay active until you unsubscribe
• We do regularly clean out totally inactive subscribers for whom the communication doesn't look relevant anymore

👤 Who are these?‍

• People who are key users in Cyberday accounts
  
  • individuals who create a Cyberday account
  • other users that admins invite to Cyberday accounts in key roles (other admins or core team users)
  • Cyberday trial users

ℹ️ Source of personal data‍

• Data subject: information you provide us when creating your Cyberday account
• Data subject: actions you take in Cyberday account

🧑‍🔧 Purposes of processing personal data‍

• Provision of the service, account management
  
  • legal basis: contract performance
• Security, logging, compliance features
  
  • legal basis: legitimate interest

🫆 Personal data involved‍

• Account data
• Usage data
• Audit logs
• Customer uploaded compliance documentation

📣 Other notes

This part of Cyberday use is fundamentally different related to personal data processing:

• Processing is related to operational use of Cyberday
• Cyberday Inc. acts as controller for account data and processor for customer-generated data

To see more details about the personal data processing related to Cyberday app usage, please refer to our full Privacy policy.