Skybox Security Privacy Policy

1. Introduction & Overview

1.1 Introduction

  1. Skybox Security develops integrated security management solutions for enterprise–scale vulnerability and threat management, security policy and firewall management (the “Service”).
  2. This Policy defines the ways in which Skybox collects, stores, shares, uses, retains and protects personal data provided to it.
  3. This policy describes the types of personal information collected by Skybox, the way Skybox uses and protects this information, and to whom it is disclosed.
  4. In this Policy, “Skybox” refers to Skybox Security, Inc. and its “Affiliates”, which shall mean subsidiaries, parent companies, joint ventures and other corporate entities under common ownership.

1.2 Definitions

  1. “Data Controller” – means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
  2. “Data Processor” – means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
  3. “Data Subject” – a natural person whose personal data is processed by a controller or processor
  4. “Identifiable natural person” – means one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
  5. “Personal Data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
  6. “Cookies” – are small pieces of information that are stored by the user’s browser on the user’s computer hard drive which enables the organization to recognize the user’s computer when the user returns to the site. A cookie file can contain information such as a user ID that may be used to track the pages you have visited on our site. Cookie List

1.3 Purpose and Scope

  1. This Policy defines the ways in which Skybox collects, stores, shares, uses, retains and protects personal data provided to it.

1.4 Applicability

  1. All Skybox personnel and suppliers are responsible and accountable for adhering to and implementing this policy.

2. Method

2.1 Collection of Personal Information

  1. The type of personal data collected in accordance with the Service may vary depending on the activity and may include:
    1. First and last name (or the name you have associated with your device);
    2. Telephone number;
    3. Transaction identifiers for purchases;
    4. Age and date of birth;
    5. Gender;
    6. Country;
    7. If applicable, physical geolocation and that of the devices you use to access our Services;
    8. zip code;
    9. area code;
  2. Skybox may also receive public information from third parties in connection with market and demographic studies and/or data that Skybox may use to supplement personal information provided directly by the customer.
  3. Skybox gathers certain non-personal identification information and stores it in log files when you interact with Skybox Websites. This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, identification numbers associated with your devices, your mobile carrier, and system configuration information. Occasionally, we connect Personal Information to information gathered in our log files as necessary to improve Skybox services for individual customers. In such a case, we would treat the combined Information in accordance with this privacy policy.

2.2 Use of Personal Information

  1. Skybox uses the personal data to create accounts, to process transactions, to operate and optimize our Services, to provide you with a safe, smooth, efficient and customized experience, to fulfill specific requests and to send its customers other account-related information.
  2. In addition, the personal data provided to Skybox will allow it to send the users messages regarding, among other things, updates, new products, features, enhancements, special and promotional offers, upgrade opportunities and events of interest.
  3. Skybox may also use personal data to
    1. Better understand the behavior and preferences of its customers;
    2. Provide technical support and respond to inquiries;
    3. Help create a safer and more trusted environment for our customers by preventing fraud or potentially illegal activities;
    4. Deliver and enforce our Terms of Service,
    5. Target and serve static and dynamic advertising;
    6. Solicit input and feedback to improve Skybox products and Services and their content;
    7. Ensure proper functioning of our products and Services;
    8. Personalize our services and manage and deliver contextual and behavioral advertising;
    9. Administer surveys or other promotional activities or events sponsored or managed by us or our business partners;
    10. Comply with our legal obligations, resolve any disputes we may have with customers;
    11. Enforce our agreements with third parties and conduct research.
  4. Skybox may send periodic emails. The email address Users provide for order processing will be used only to send them information and updates pertaining to their order or to respond to their inquiries, requests or questions. Users who decide to opt in to Skybox’ mailing list will receive emails that may include company news, updates, related product or service information, etc. Users who wish to unsubscribe from the list may do so at any time by following the detailed instructions found at the bottom of each email they receive from Skybox.
  5. Skybox will not retain personal data for longer than is necessary for our business purposes or for legal requirements.
  6. In addition to the direct Service, Skybox uses personal information that people voluntary provide to:
    1. Reply to user’s request of information regarding Skybox products and services;
    2. Allow candidates to apply for a job through Skybox’ site.
  7. In all cases of data access and collection, the information provided will not be disclosed, rented, loaned, leased, sold, or otherwise voluntarily distributed to unaffiliated third parties and will be used solely for the purpose stated herein.

2.3 Cross-Border Transfer, Processing and Storage of Personal Data

  1. As part of its international operations, Skybox may transfer personal data to its Affiliates from time to time for our legitimate business purposes.
  2. Skybox transfers personal data to a third country only if the controller or processor has provided appropriate safeguards, and on condition that enforceable data subject rights and effective legal remedies for data subjects are available.
  3. Personal data collected may also be processed by Skybox’ employees operating outside of the EU or one of its Affiliates or vendors. This staff may be engaged in processing transactions and payment details or provisioning support services. Skybox vendors are carefully vetted through a vendor assessment procedure and are legally committed to comply with relevant regulations.

2.4 Sharing Information With Third Parties

  1. Skybox does not share personal information with third parties for their direct marketing purposes unless upon specific consent to such disclosure.
  2. Skybox may pass Personal Information to third parties who help Skybox to maintain, administer or develop the site, such as sending out newsletters or surveys. Skybox may share Users’ information with such third parties, for those limited purposes, for a limited time and only subject to Users’ permission.
  3. Skybox discloses Personal Information to third parties only if they have satisfactory measures to protect Personal Information.

2.5 Links to Third Parties’ Sites

  1. Skybox may include or offer links to third party products or services. Skybox does not control the content or links that appear on such other sites and is not responsible for the practices they employ. These parties should have separate and independent privacy policies, and Skybox has no responsibility or liability for the content and activities of these linked sites.

2.6 Children’s Privacy

  1. Skybox is committed to protecting the privacy needs of children and encourage parents and guardians to take an active role in their children’s online activities and interests. Skybox does not knowingly collect information from children under the age of 18 without their parents’ or guardians’ consent. Skybox relies upon the accuracy of information provided by the controller to determine age.

2.7 Consent

  1. Private data is collected and processed by Skybox only upon specific consent of the data subjects, unless another legal basis applies.

2.8 Accurate Records

  1. Skybox maintains accurate customer records.
  2. Customers may request to modify their Personal Information at any time by submitting a request through the support portal.

2.9 Deletion of Personal Information

  1. Skybox supports the Data subjects’ “Right to be forgotten”.
  2. Data subjects may request to remove their Personal Information at any time by submitting a request through the support portal.
  3. Accounts created with Skybox are considered active until Skybox receives a user request to delete them or deactivate them.

2.10 Protecting your Information

  1. Skybox follows appropriate data collection, storage and processing practices and suitable security measures in order to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information, and all other data stored on our Site.
  2. Sensitive and private data exchange between the Site and its Users happens over a secured SSL communication channel and is encrypted and protected with digital signatures.

2.11 Changes to this privacy policy

  1. Skybox has the discretion to update this privacy policy at any time.

2.12 Contact Information

  1. For any questions, comments or concerns about our Privacy Policy or any other issue please contact Skybox via:
    1. Email:  GDPR-DP@Skyboxsecurity.com
    2. Trouble ticket via the Skybox website www.SkyboxSecurity.com.
    3. Phone at +1 408 411-8060
  2. All notices given by you or required from you under this Privacy Policy shall be in writing and addressed to: Skybox Security, Inc., 2077 Gateway Place, Suite 200, San Jose, California 95110 USA