Privacy Policy
Considering the commitment made by HACKER RANGERS SECURITY AWARENESS LLC (herein referred to as “we”, “us”, “our” and “Hacker Rangers”) to promote confidentiality and transparency about the processing of personal data, this Privacy Policy aims to inform data subjects and/or their legal representatives about the use of their data.
This Privacy Policy applies to our institutional website, communication channels, and the Hacker Rangers information security awareness platform. By using our websites, services, or platform, you acknowledge that you have read and understood this Privacy Policy.
WHAT IS THE PROCESSING OF PERSONAL DATA?
Personal data is information that identifies or allows the identification of a person. Any activity involving this type of data can be considered “processing of personal data”, such as collection and storage.
For better understanding, we have divided our privacy policy into two sections. If you use the contact forms on the hackerrangers.com and perallis.com websites, you will find information about the processing of your data in the “Business contact” section. If you are a user of the Hacker Rangers platform, information on how your data is used on the platform is available in the “Hacker Rangers users” section.
Our website, hackerrangers.com, also uses cookies and similar technologies to enable website functionality, remember preferences, measure audience and improve the browsing experience. You may manage or disable cookies through your browser settings or, where available, through our cookie management tools. Disabling certain cookies may affect website functionality. Where the GDPR applies, we process personal data only where a lawful basis under Article 6 of the GDPR is applicable. Depending on the circumstances, the lawful basis may include consent, performance of a contract or steps taken at the request of the Data Subject prior to entering into a contract, compliance with a legal obligation, or our legitimate interests, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the Data Subject.Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
DEFINITIONS
Personal Data: Any information relating to an identified or identifiable natural person.
Special Categories of Personal Data: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data used for uniquely identifying a natural person, data concerning health, or data concerning a natural person’s sex life or sexual orientation.
Data Subject: The identified or identifiable natural person to whom personal data relates.
Processing: Any operation or set of operations performed on personal data, whether by automated means or not.
Controller: The natural or legal person that determines the purposes and means of the processing of personal data.
Processor: A natural or legal person that processes personal data on behalf of a Controller.
Data Protection Officer (DPO): The person designated as a contact point for data protection matters and communications concerning the processing of personal data.
Supervisory Authority: An independent public authority responsible for monitoring the application of applicable data protection legislation, including the GDPR where applicable.
DATA SUBJECT RIGHTS
Where data protection legislation applies, you may have the following rights in relation to your personal data, subject to applicable legal conditions and exceptions:
- Right of access: to obtain confirmation as to whether your personal data is being processed and, where applicable, access to such personal data and information about its processing;
- Right to rectification: to request the correction of inaccurate personal data and the completion of incomplete personal data;
- Right to erasure: to request the deletion of your personal data in certain circumstances;
- Right to restriction of processing: to request that the processing of your personal data be restricted in certain circumstances;
- Right to data portability: to receive personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible and legally applicable, to have that data transmitted to another controller;
- Right to object: to object to the processing of your personal data where the applicable legal requirements are met, including, in particular, processing based on legitimate interests. You may also object at any time to the processing of your personal data for direct marketing purposes;
- Right to withdraw consent: where processing is based on consent, to withdraw your consent at any time;
- Rights relating to automated decision-making: where applicable, to obtain appropriate safeguards concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects, in accordance with applicable law;
- Right to lodge a complaint: to lodge a complaint with a competent data protection supervisory authority, particularly in the European Union or European Economic Area where the GDPR applies.
These rights may be subject to legal limitations or conditions under the GDPR and other applicable laws.
INFORMATION SECURITY
Hacker Rangers adopts appropriate technical and organizational measures designed to protect personal data against unauthorized access and against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or other unlawful or unauthorized processing. Our information security practices are aligned with our Information Security Management System based on the ISO/IEC 27001 standard.
BUSINESS CONTACT
Hacker Rangers acts as the Controller of personal data that it collects directly and for which it determines the purposes and means of processing. This may include personal data relating to website visitors, prospective customers, commercial contacts, event participants, recipients of informational materials, and job applicants.
WHAT DATA DO WE COLLECT?
To initiate business contact, we only ask for your name, email, phone number, position, and organization, which are necessary to enable the contact. We also collect your IP address when the form is submitted.
WHY DO WE PROCESS YOUR DATA?
Personal data collected through our commercial channels may be processed, depending on the context of the interaction, for the following purposes: recruitment and selection: to enable participation in professional opportunities and the corresponding recruitment and selection stages; requests, support and communication: to respond to questions, requests and other communications and to provide the necessary support; marketing and communications: to send content, informational materials, news, commercial communications and newsletters, where applicable and in accordance with the applicable lawful basis; commercial communication: to respond to requests for a free trial period, provide information about the Hacker Rangers platform and present our products and services.
We use the IP address for security and control of who sends the information, seeking to avoid fraudulent situations involving false information and/or that may harm the data subjects of the collected data, especially in the event that they have not been sent by the data subject themselves.
WHO HAS ACCESS TO YOUR DATA?
The data collected is kept confidential and secure by us, being accessible only to employees involved in the business contact process and eventual negotiation, who are committed to ensuring the confidentiality of the information. We do not share personal data publicly or with third parties, except at the express request of the data subject or when required by law.
HOW DO WE USE YOUR DATA?
Commercial contacts may involve communication by email and telephone for purposes such as presenting the Hacker Rangers platform, responding to requests, providing information about our products and services, and maintaining the commercial relationship.
FOR HOW LONG?
The data will be kept as long as there is commercial interest between the parties. You can request the end of the commercial contact, and the deletion of your data at any time through our service channels.
In the event that we understand that, despite the sending of the data, there is no longer commercial interest between the parties, the data may be deleted regardless of notice, and the right of the data subject to request confirmation of the existence of processing at any time is safeguarded.
HACKER RANGER USERS
When providing the Hacker Rangers security awareness platform to a customer organization, Hacker Rangers generally processes personal data relating to platform users as a Processor, on behalf of the customer organization, which acts as the Controller and determines the purposes and means of processing.
In this context, the customer organization is generally responsible for determining the purposes and lawful basis for the processing of its users’ personal data. Requests concerning the exercise of Data Subject rights should generally be directed to the relevant customer organization as Controller. Hacker Rangers will provide reasonable assistance to the Controller in accordance with the applicable contractual and legal requirements.
WHAT DATA DO WE COLLECT?
For the use of Hacker Rangers, we request only your name and email address. In the user’s profile, there is the possibility of defining an identification photo, but this is optional. We also collect the user’s IP address whenever the platform is accessed by them.
WHY DO WE PROCESS YOUR DATA?
The processing of the aforementioned personal data aims to enable the full use of the platform by users registered in an instance by its administrator(s).
For this purpose, it is called an instance the party created as a result of contracting a license to the Hacker Rangers platform for the exclusive use of the contracting legal entity, which controls and manages the instance.
In addition, we use the IP address for access control and user security, seeking to avoid fraudulent situations that may cause damage to the user and the integrity of the platform.
WHO HAS ACCESS TO YOUR DATA?
The data collected is kept confidential and secure by us, and can be accessed by employees who work in the maintenance of the Hacker Rangers. Considering the functionalities and activities inherent to the platform, the administrators of the instances have access to the information of the users registered in the instance under their control, and may even share this information among the users. As part of the platform’s ranking functionality, users within the same instance may be able to view the names and profile pictures of other users, where those functionalities are enabled by the customer organization and applicable to the program.
HOW DO WE USE YOUR DATA?
We use personal data to identify and record user activities during the use of the Hacker Rangers platform, for example, creating a personal account, assigning scores, and ranking positioning, among other activities related to the common and expected use of the platform. Emails may also be sent for a password reset, phishing simulations, and
HOW LONG DO WE RETAIN YOUR DATA?
The data will be kept for the duration of the Hacker Rangers license agreement that originated the instance where the user is registered. At the end of the contracted period, the data will be deleted within 30 (thirty) days, regardless of notice. The data may be kept at the express request of the administrator(s) of the instance or when required by law, and the right of the data subject to request confirmation of the existence of processing at any time is safeguarded.
ADDITIONAL INFORMATION
During the free trial period of Hacker Rangers, where the request has been approved, as well as during the contractual term of a license for the use of the platform, users of the platform are subject to the applicable Terms of Use, which are available on the Hacker Rangers website.
CONTACT US
If you have questions about this Privacy Policy, would like to obtain additional information, or wish to exercise an applicable data protection right, you may contact us through the contact form available on our website or through the email address below.
