By providing the following information, we want to give an overview of the processing of your personal data which is carried out by us and of your rights under the data protection law in the framework of the contractual relationship with Maltego Group (hereinafter referred to as "Maltego"). Which data is processed specifically and in what way it is used substantially depends on the ordered services. Therefore, not all parts of the provided information may apply to you.
1. The data protection controller is Maltego Technologies GmbH, Paul-Heyse-Str. 29, D - 80336 Munich, Email: contact@maltego.com, Phone: +49 (0) 89 24418490. Especially with regard to data protection issues, you may also contact the Data Protection Officer at dataprotection@maltego.com at any time.
2. We process personal data which we receive from our customers or other parties concerned in the course of our business relationship. In the context of the business relationship you are obliged to provide such personal data which is required in order to enter, conduct or terminate a business relationship and to perform the corresponding contractual obligations or such personal data which we are legally obliged to collect. Without this data we shall regularly not be able to conclude a contract with you or to conduct or terminate such a contract.
3. For the performance of the contract we process the following information:
4. We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) for the performance of contractual obligations (Article 6 (1) sentence 1 lit. b of the GDPR).
The processing of data is carried out in order to provide goods and services in the course of the performance of the contracts with our customers or the performance of pre- contractual measures that are provided upon request. The purposes of the processing primarily depend on the actual product (e.g. distribution of software licenses) and can include, inter alia, needs analysis and consulting.
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers [[INSERT ANY OTHER PAYMENT TYPES ACCEPTED]]), email address, and phone number. We refer to this information as “Order Information.”
5. To the extent necessary for the performance of our services, we also process personal data which we obtain from public sources (e.g. the press, internet) or which is transferred to us by affiliated companies of Maltego or other third parties (e.g. a credit reporting agency).
6. We also process personal data based on your consent (Article 6 (1) sentence 1 lit. a of the GDPR). If you give your consent to the processing of personal data for a specific purpose (e.g. disclosure of data to subcontractors, evaluation of license and payment data for marketing purposes, newsletters) the processing is considered lawful based on your given consent. Declarations of consent must be given freely. The declaration of consent must indicate the purpose of the processing of data. If you have given your consent to the processing of your data, you may withdraw your consent at any time without having to provide reasons. The lawfulness of processing based on an effectively given consent remains unaffected until the time the consent has been withdrawn.
7. In some cases, we like to record customer meetings for internal training purposes. The recordings should be used to train our employees to enable a higher quality in our customer meetings. The recording is done. e.g. by MS Teams. We only record client meetings after you have given your consent. The consent is obtained online. We store the recordings for 2 years. You can revoke your consent at any time. For this purpose, please contact us using the contact details provided in this privacy policy in chapter 1.
8. When you participate in a webinar that is either hosted or co-hosted by Maltego, you may be asked to provide your personal information, which will allow you to sign into, or otherwise participate in, the webinar. Webinars may be hosted and recorded by Maltego, its co-hosting partner and/or a sponsor of the webinar (each a “Host” and together the “Hosts”, whereby all Hosts will be disclosed as part of the webinar offering). Please refer to all other Hosts’ privacy policies for further information on how they use your personal information, as Hosts may collectively use and transfer amongst one-another your personal information, including, for example, your webinar sign-in information and any audio and/or video recordings of the webinar (if applicable) so long as the transfer is consistent with the uses contained in this paragraph and the relevant Host’s privacy policy. Accordingly, you will be asked to provide your consent to our and our Hosts’ use of your personal information for such purposes. Subject to any other terms and conditions of your consent, in addition to using your personal information for providing you with webinar access, information collected during a webinar may also be used by Maltego or a Host to understand industry- wide pain points, to enhance Maltego’s or a Host’s products and/or service offerings, or for Maltego’s or any Host’s general marketing purposes.
9. You can participate in the Maltego Academic Program which is designed to enhance innovation by giving eligible participants access to the Maltego Software. The program is destinated to NGOs and other non-profit companies that are granted with Maltego licenses for conducting a research project for non-commercial purposes. Each participant shall complete an online application indicating the project for which the Participant would like to use the subscription licenses. Within the application the following data is collected: email address, name, physical address, LinkedIn accounts, Twitter accounts, Github accounts, project/training descriptions, NGO registration numbers, documents justifying registrations, countries partners are from, email address of students, names of students. The processing of this data is necessary to participate in the Maltego Academic Program. Please note that you need to inform your employees about the data processing if you register them for the program. The data is stored until the purpose no longer applies (end of the program) or until you request us to delete it.
10. If you participate in the Train the Trainer Program your personal data is processed. This program is designed to empower trusted trainers to deliver training content developed by Maltego. Maltego teaches the registered participants on how to train others on Maltego products. If the participants successfully complete the training program they will be certified as Maltego trainers and will be able to deliver Maltego trainings according to program’s terms and conditions. The data is stored until the purpose no longer applies (end of the program) or until you request us to delete it.
The processing activities and categories of personal data processed within this program are the following:
11. Sometimes we are asking for your user experience and your feedback. We send out surveys. Participation in the surveys is voluntary unless it is necessary for the fulfilment of the contract. Information that is required for participation in the survey is marked as mandatory. It is important to us that only the personal data required for the survey is collected. Where possible, we conduct the surveys anonymously. The data is stored for the purpose of conducting the survey and deleted once the purpose no longer applies.
12. The processing of your personal data can also take place if this is necessary to realise the legitimate interests of Maltego (Article 6 (1) sentence 1 lit. f of the GDPR). Legitimate interests exist for example, if we assert a legal claim against you or we need to defend ourselves in a legal dispute. The processing of personal data on the basis of a legitimate interest shall not take place if there is an indication that the interest in the processing is overridden by your legitimate interest in that particular case. The existence of legitimate interests shall be assessed in each case of processing.
13. Maltego processes personal data if you apply for a job. Detailed information about data processing can be found in the Applicant Privacy Policy.
14. Fraud checks. In exceptional cases it might happen that your purchase is set on review. In this case Maltego requires further information for internal fraud checking purposes, to ensure the security of your data and to execute the purchase. In order to minimise these cases, Maltego has already banned the use of unusual email addresses and will also set on internal fraud check review of public email addresses.
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Stripe to power our online store--you can read more about how Stripe uses your Personal Information here: https://www.stripe.com. We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
YOUR RIGHTS If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
DATA RETENTION When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
CHANGES We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
CONTACT US For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at office@darkriversystems.com or by mail using the details provided below: PO Box 14, Navan Station Main, Ontario, K4B 1J6
