Privacy statement and cookie policy

Hadrian provides its customers with an agentless proactive security platform that is built by a team of expert hackers. We use new cloud-native technology and machine learning to report vulnerabilities in companies' defence systems before attackers can exploit them (the “Hadrian Platform” or the “Service”).

Hadrian Security B.V. and any other legal entity that comprise the Hadrian group (together: Hadrian) may collect your personal data when you visit our website, use our Hadrian Platform,  order or purchase Hadrian products or services, use our apps, and/or when you are in contact with Hadrian. This Privacy Statement applies to the collection and processing of the personal data of customers and users of Hadrian’s Platform and users of Hadrian websites, social media channels and apps (hereafter: "you").

Hadrian attaches great importance to protecting the privacy and security of your personal data. We will process your personal data in accordance with the EU General Data Protection Regulation, and/or local privacy laws (when applicable).

Hadrian may amend this Privacy Statement from time to time. You may always view the latest version of the Privacy Statement at www.hadrian.io under “Privacy Statement” at the bottom of the website. We advise you to visit this website regularly to determine whether you have the most recent version of the Privacy Statement, and that you do so whenever sharing your personal data to Hadrian.

We handle data protection and privacy in accordance with below privacy principles:

Hadrian Security B.V. is responsible for processing your personal data that we collect on our website. You can find our contact details at the end of this Privacy Statement.

Hadrian collects your personal data as required, generally:

Hadrian may process the following items of your personal data:

Following your consent, we will inform you on new products, specials and other promotional activities by sending you our newsletter. You always have the option to opt-out of receiving further commercial communications from us by using one of the following options:

• By clicking the ‘unsubscribe’ link at the bottom of the respective Hadrian e-mail;

• By clicking the ‘unsubscribe from all’ link in the newsletter preferences in your personal Hadrian account;

• By sending an email to privacy@hadrian.io;

• By indicating this in writing to Customer Service using the postal address below or by using the contact form on www.hadrian.io.

If you create an online account on our platform or apps, we collect your personal data on a secure server. You are asked to fill in your name, e-mail, and password to allow you to access our platform. We store this information so you can access the platform the next time you log in.

If you contact our customer service, we will collect your name, e-mail address (and any additional data you may provide us with), the content of correspondence and conversation notes and call recording in case of telephone contact to be able to respond to your questions or comments or to provide better service and for training purposes.

Is collected automatically when using the Service. Usage Data may include information such as your device's Internet Protocol address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data. When you access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of Your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data. We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device.

If you apply for a job at Hadrian, we will collect your name, e-mail address, phone number, CV/resume, photo, and cover letter.

Hadrian may use security cameras in its offices to ensure your security and the security of its staff and to be able to comply with its legal obligations. You will be informed about the cameras when entering the office and the cameras are clearly visible. These images are automatically erased after 7 days unless an incident has occurred, in which case the period will be extended under strict conditions. Only a limited number of trained staff members have access to surveillance images. The images may be provided to the police and judicial authorities in case of incidents.

We use technology service providers such as Google to collect and display detailed statistics from our websites. The purpose of this service is to give us a clear overview of visitor flows, traffic sources and pageviews. Based on this information we can improve our websites and improve your shopping experience on our websites and apps.

The legal grounds for processing this personal data (depending on the person and the circumstances) are:

Processing of personal data related to your purchase, email notifications about your purchase and delivery of the products. Also to provide you with the services and responding to your requests to provide customer service and to provide you with essential information regarding our products and services.

We use your personal data both on aggregated and on individual basis for the marketing of our products and services, to contact you via e-mail, social media or otherwise for interest-based advertising or other commercial purposes. We also use your personal data to create a marketing profile for analysing and improving the quality of our products and services, to assess what may interest you, to measure or understand the effectiveness of advertising we serve to you and others and to deliver relevant advertising. We may also use your personal data for our other legitimate commercial interests such as to operate and expand our business activities; to develop, improve or modify our products and services; to generate aggregated statistics about the users of our products and services; to facilitate our business operations; to operate company policies and procedures; to enable us to make corporate transactions, such as any merger, sale, reorganization, transfer of our assets or businesses, acquisition, bankruptcy, or similar event; or for other legitimate business purposes permitted by applicable law. With this, we refer to a legitimate interest as described in article 6, paragraph 1, sub paragraph f of the EU General Data Protection Regulation. We have performed a balancing test to weigh the legitimate interests of Hadrian (as described above) against your interests, rights and freedoms. We deem that the processing is necessary to achieve our interests. It is relevant to state that the breach of your privacy rights and freedoms is minimised because, wherever possible, we use pseudonyms, aggregates and apply other principles of Privacy by Design. Hadrian has a policy to monitor and continuously improve this. Our internal audit will oversee this. Only a limited number of staff have access to your personal details only when required to exercise their duties. Hadrian has carefully safeguarded your personal details (see ‘How do we protect your personal data’ below).  Considering the above, Hadrian believes that there are no interests, rights or freedoms that are more important to you than the legitimate interest of Hadrian to conduct its business to the best of its ability.

If you have not purchased any product or service from us, we will only send you direct marketing communications (such as newsletters, promotions, news on products or service updates) via email, other electronic means, via telephone or via hardcopy mail (such as flyers), after we have received your consent to do so. You can withdraw your consent at any time (see the section Your Privacy Rights below).

Hadrian has taken appropriate technical and organisational measures to protect your personal data against loss or any form of unlawful processing. We protect your personal data using a range of security measures, including secure storage. Our information security policy is based on the ISO 27002 norms and includes regulations about the organisation of the security of personal data (assigning responsibilities in function profiles), managing company resources, the physical security of the premises, entry control and authorisations for staff members, maintenance and development of systems, calamities, business continuity, monitoring potential threats (external or internal), monitoring information security incidents, and conducting a periodic security audit of the systems.

Our basic principle is that we (a) do not share your personal data with third parties, and (b) only share your personal details with other Hadrian companies (intragroup) if  needed. In some cases, however, we need to share your data with third parties, for example, in the context of performing an agreement, to help us providing our products and services, or to send out marketing messages, including:

• Customers, suppliers (such as IT service providers) and subcontractors;

• Contact centers, to assist us with respect to Customer Service;

• Advertising and media companies that carry out marketing and media activities on our behalf;

• Analytics and search engine providers that assist us in the improvement and optimisation of our websites and apps;

• In the event of a transfer of shares or related transactions for due diligence. We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.

When you visit the Hadrian websites, Hadrian uses cookies to improve your user experience. We use cookies and similar tracking technologies to track the activity on our Service and store certain information. Tracking technologies used could be beacons, tags, and scripts to collect and track information and to improve and analyse our Service.  The technologies we use may include:

A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use certain parts of our Service.

Certain features of our Service may use local stored objects (or flash cookies) to collect and store information about your preferences or your activity on our Service. Preference cookies are not managed by the same browser settings as those used for browser cookies. For more information on how you can delete preference cookies, please read "Where can I change the settings for disabling, or deleting local shared objects?" available at https://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.

Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Hadrian, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity). Cookies can be "persistent" or "session" cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.

These cookies are essential to provide you with Services available through our website Hadrian Platform and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these cookies, the Services that you have asked for cannot be provided, and we only use these cookies to provide you with our Services. These cookies exist per session and are managed by us.

These cookies identify if users have accepted the use of cookies on our website and Service. These cookies are persistent and are managed by us.

You are entitled at all times to ask Hadrian for access to the personal data that Hadrian has stored about you. You have the right to request:

• Access to your personal data (access).

• Change or correct your personal data (rectification).

• Ask to delete your personal data (erasure/right to be forgotten). Please note that although we will grant a request to delete information if required by law, in many situations we must keep specific personal information to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes.

• Restrict the processing of your personal data (restriction).

• Transfer your data to another controller or to yourself if we have processed your data based on your consent or based on the agreement you have entered into with us (data portability).

• Object to the (further) processing of your personal data if we have processed your data based on our legitimate interests (objection).

Under GDPR, it is the role of the data controller to inform you about the processing of your personal data. In the cases described below, our customers are the data controllers. If you wish to use your data subject rights (for example deletion or access to your data), you should contact our customer, in most cases your employer, because they are data controller and should be able to help you. Only in case this is unsuccessful, you can contact us directly via privacy@hadrian.io.

Although our customers are data controller, we want to provide clarity to you about processing activities that we carry out on behalf of our customers.