1. Introduction

Riskly B.V. (“Riskly”, “We” or “Us”) is a cloud based third party relationship management platform that helps Customers build stronger relationships with their third parties. Riskly respects the privacy of individuals and is committed to protecting the data of visitors to the website “Visitors” and individuals or entities that register to use the Riskly Product and services through the Website “Customers”.

This privacy policy describes Riskly’s practices for collecting, using, maintaining, protecting and disclosing data in relation to Visitors on the website, https://riskly.net. “Website”, Riskly’s marketing activities and Customers accessing, using the Website to register for the Product and services “Product”and the use of our Product.

Riskly encourages you to read the following carefully to understand our policies and practices regarding your data through the Website, through your use of the Product, through our marketing activities and how We will treat it. If you do not agree with our policies and practices, your choice is not to use our Website or to use our Website to register for our Product.

This privacy policy provides information about how Riskly handles data in its role as data controller, meaning all data We process for our own purposes. Where Riskly is a processor or a sub-processor of data, that processing is governed by a data processing agreement.

2. Personal data We collect and how We collect it.

2.1 Personal data you provide to Us:
  • You provide your Personal Data to us when you voluntarily complete our forms on our Website such as when you request a demo or when you contact sales. This Personal Data may include: Your first and last name, company information such as your job title, work email address, phone number and the content of your request.

  • You may also share your Personal Data with Us through our Website when you sign up to register for an event, to receive our newsletter, subscribe to our blog, register for an event, register for an online webinar, download a whitepaper or complete a survey. This Personal Data may include: Your first and last name, company information such as your job title, work email address, phone number and the content of your request.

  • In order to access and use the Product, you are required to register for an account with us. When you register for an account, you may provide your Personal Data to us, including first and last name, email address, company name, telephone number and password.

  • In order to subscribe to the Riskly Product, you may have to provide your credit card information or other payment details directly to our third party payment processor, as explained below, Riskly does not store, process or transmit this information.

2.2 Personal Data We collect from Third Parties

Riskly may obtain your Personal Data from third parties, including, but not limited to, marketing event organizers and partners. This information may include your first and last name, company information such as your job title, work email address and your phone number. Riskly requires that any third party providing it with Personal Data has obtained the information lawfully and the third party has obtained the appropriate consent to share the Personal Data with Riskly.

2.3 Information We collect automatically

By using our services or browsing our Website, We automatically collect your Personal Data:

  • As you navigate through and interact with our Website or Product, We may use cookies. Cookies are small files placed on your device, and web beacons, which are small files located on pages of the Website, to collect information about your equipment, browsing actions and habits

  • Within the Product, We also use cookies to access information when you sign in, store your preferences and to keep you logged in.

  • The following Personal Data is collected from cookies and web beacons: Information from your web browser, such as the type and language of the browser and details of your visits to our Website, including traffic data, location data and logs, page views, length of the visit and website navigation paths as well as information about your computer and internet connection, including your IP address and how you interact with our Product. This Personal data is collected to improve our Website, our Product and the user experience of these.

  • When using our Website you can decide to accept these cookies, a banner is available to do so. If you have accepted the cookies and you wish to change your preferences, you can do so every time you visit our Website. 180 days after you’ve given your consent it automatically expires and we’ll ask you your consent again to place cookies. You can withdraw your cookies at our website by either deleting them via your browser as defined in the link above or by changing your preferences here or via the legal banner at the bottom of our website.

  • For more information about cookies, please visit: https://ico.org.uk/your-data-matters/online/cookies/

  • Within our Product, Riskly supports Do Not Track signals set by your browser. However, as it is not an industry or legal standard, We do not support Do Not Track on our Website.

3. How Riskly uses your Personal Data

Riskly uses your personal data that We collected about you or that you provided to us in our legitimate interest to respond to a request from you, to carry out our legal obligations, to fulfill a contract with you, to provide you with notices and for other purposes you provided us your consent for as described below:

  • When you complete one of our forms on our Website We will use your Personal Data to contact you about that request. Our legal basis for processing this Personal Data is our legitimate interest in communicating with you to fulfil your request on our Website.

  • We also use your personal data for non-marketing and administrative purposes such as notifying you about major changes to the Website, the Product or for Customer service purposes. Our legal basis for processing your Personal Data is in the performance of our contract to provide the Product and other services to you.

  • We also use your Personal Data to provide you a secure and integer product and to ensure our business continuity (maintaining backups of our databases) and for the purpose of operating our Website. Our legal basis for processing your Personal Data is our legitimate interest for the administration and security of our Website and Product.

  • We also process your Personal Data through tracking technologies about your interaction with our Website and Product. This Personal Data is used to improve our Website and Product in order to increase the user experience. Our legal basis for processing your legal data is our legitimate interest to provide you with a better user experience.

  • We also process your Personal Data through tracking technologies, for marketing purposes that for instance allow us to place advertisements for our product on other websites than ours. Our legal basis for processing your Personal Data is consent. You can withdraw it at any time as detailed above in the Cookie paragraph.

  • We may also use your Personal Data for the purposes of: (i) enforcing our agreements and policies, including the Terms and Conditions or Master Service Agreement, (ii) protecting or defending Riskly’s legal rights or (iii) to comply with a legal obligation.

  • We may use your Personal Data for any other business purpose as stated when collecting your Personal Data or as otherwise set forth in applicable data protection laws, such as the General Data Protection Regulation (GDPR).

4. Disclosing Personal Data

Riskly shall not disclose any Personal Data that we collect other than the practices as described below:

  • We may disclose Personal Data to our subsidiaries and affiliates. This Personal Data may include, first and last name, company information such as your job title, work email address, phone number and analytical data such as geolocation data and data about your interactions with our Website and Product.

  • We may share your Personal Data with third party providers who need the access in order to perform services on behalf of Riskly, such as processing or storing information on our behalf. These third parties are subject to contractual obligations to keep Personal Data confidential and integer and only use it for the purposes We instruct them for. This Personal Data may include, first and last name, company information such as your job title, work email address, phone number, payment information such as credit card details and analytical data such as geolocation data and data about your interactions with our Website and Product. These third parties are: AWS, Hubspot, Gsuite, Google 360suite, Mailgun, Noora.

  • Riskly reserves the right to disclose your Personal Data that Riskly reasonably believes is appropriate or necessary to: (i) enforce our agreements and policies, including for billing and collection purposes, (ii) protect the confidentiality and integrity of the Website and Product and services or (iii) to protect or defend Riskly’s legal rights.

  • Riskly may disclose non personally identifiable aggregated information about Visitors of the Website or on our Customer’s use of the Product without any restriction for the purposes of published studies and white papers. This non-personally identifiable aggregated information may include, but is not limited to, amount of users, amount of vendors, amount of critical vendors managed. Riskly will make sure confidentiality of disclosed information is maintained.

  • Riskly may share Personal Data to third party partners or tools when you use our products or services as part of or integrated into third party products or websites.

  • Riskly may also disclose Personal Data that you provide to us or that We collect for any purpose when you provide your consent to do so.

  • In the event that Riskly is acquired by or merged with a third party entity, We reserve the right to transfer or assign your Personal Data We have collected from you as part of such merger, acquisition, sale or other change of control. In the unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors or the applicable laws or equitable principles affecting creditors rights generally, We may not be able to control how your Personal data is treated, transferred or used.

5. Selling Personal Data

Riskly does not, and does not have the intention to, sell your Personal data.

6. Transfer of Personal Data

The data servers Riskly utilizes to provide the Website and Product are located in Europe. By interacting with the Website or using the Product, you understand that your Personal Data will be transferred to Europe and you consent to such transfer.

7. Security of Personal Data

Riskly uses commercially reasonable physical, managerial, and technical safeguards designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration and disclosure or access to personal data transmitted, stored, or otherwise processed.

8. Your rights

Depending on the local data protection laws, you have rights that may include:

  • Information about our processing of your Personal Data
  • Access to your Personal Data that We hold
  • The right to have inaccuracies of your Personal Data corrected
  • The right to have your Personal Data delivered to you in a standard electronic format
  • To object to our processing of your Personal Data and to prevent solely automated decision making or profiling
  • To restrict our processing of your Personal Data
  • To have your Personal Data deleted

You may exercise your rights with respect to your Personal Data by emailing your request to [email protected]. We will respond to your request within 30 days.

If you wish to unsubscribe from an email list, please click the unsubscribe link found at the bottom of our emails. If you work for one of Riskly’s Customer’s, please refer to the Customer and ask them to delete your Personal Data.

If you want to raise a complaint about the way We process your Personal Data or the way We have handled your request, please contact Us. You may file a complaint with the data protection authority of any country where you live or work or where Riskly operates.

9. Data retention

Personal Data collected by Riskly for the purposes as identified in this privacy policy are not kept by Riskly for longer than is necessary for the specific purpose identified in this privacy policy unless Riskly is required to retain your Personal Data for a longer period of time to comply with our legal obligations, resolve disputes and to enforce our legal agreements and policies.

10. Children’s privacy

Riskly does not knowly collect or solicit Personal Data directly from Visitors of the Website that are under the of 16. If you are under 16, please do not provide or send us any Personal Data or attempt to register for or use the Product. If We learn that a child under the age of 16 has provided us their Personal Data, then We will delete that information.

11. Links to other websites

Our Website may contain links to other third party websites such as Facebook, LinkedIn or Twitter. This privacy policy does not apply for any third party websites, including through any application that may link to or be accessible from or on the Website and Riskly is not responsible for the privacy policies and the content of the third party websites.

12. CCPA

Most of the obligations under the CCPA are addressed in other provisions of this privacy policy. This supplement is used to fill the gaps.

As a CCPA Consumer you have the additional rights to:

  • The right to access and to know specific Personal Data we collect

  • The right to request disclosure of the Personal Data collected

  • The right to disclosure of information disclosed for valuable consideration

Where to submit a request under CCPA?

California residents may submit requests under the CCPA to Riskly by sending an email to [email protected].

13. Updates and changes to this privacy policy

Riskly reserves the right, at any time, to add to, change, update, or modify the content of this privacy policy. If, at our reasonable discretion, the changes are material, We will post a notice on our Website or send you an email. The modified privacy policy will be posted on this website along with the effective data.

14. Contact Us

If you have any questions, comments or concerns about this privacy policy, please send an email to [email protected].