The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

As the data controller, Riskline stores personal data on servers in Ireland at Amazon Web Services (AWS) Aurora. Riskline maintains a backup in Frankfurt, Germany, for disaster recovery purposes. We store the data using encryption and limit access by using role-based autorisation. Where Riskline employs a data processor to handle some forms of personal data, the data is stored in accordance with that provider’s privacy policy or data processing agreement.

How long do we store your data?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We will retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

You can ask us to delete your data: see your legal rights below for further information.

Data retention policies:

• Marketing: 12 months after last contact for unresponsive data subject
• Recruiting: 12 months for expression of interest advertisements. 3 months after an open position is filled or cancelled.
• Sales and Lead Generation: 3 years after last contact for unresponsive data subject
• Customer Relationship Management: 12 months after the termination of the contract

Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.

We use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you will want or need, or what will be of interest to you. This is how we decide which products, services and offers will be relevant for you (we call this marketing).

You will receive marketing communications from us if you have requested information from us or purchased services from us and you have not opted out of receiving that marketing.

Third-Party Marketing
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.

Change of Purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we will process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Opting Out
You can ask us or third parties to stop sending you marketing messages at any time [by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences OR by following the opt-out links on any marketing message sent to you OR by contacting us at any time].

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, your provision of local security information, product/service experience or other transactions.