CyberSQUAD Privacy Policy  

CyberSQUAD is owned and organised by the Connect2Trust Foundation. Processing personal data is not a core activity of CyberSQUAD, but to avoid misunderstandings and comply fully with legal requirements, this policy formalises how CyberSQUAD handles personal data. Participants are informed of this policy, and it is publicly available through this published Privacy Policy. 

Rights of Data Subjects – Connect2Trust as Data Controller 

Connect2Trust is responsible for the secure and lawful collection, processing, and storage of personal data belonging to participants and other data subjects. Connect2Trust will enable individuals to exercise their legal rights (including access, rectification, deletion, and objection) in accordance with applicable laws and regulations. 

Data subjects may exercise their rights by contacting the Privacy Office of Connect2Trust via privacyoffice@connect2trust.org, who will handle or arrange the handling of the request. 

Rights of Data Subjects – Connect2Trust as Processor 

Connect2Trust works with organising partners to bring together the next generation of CISOs, CTOs, and CIOs to strengthen digital resilience across supply chains, regions, and (cross-)sector ecosystems. Fulfilling this role may require collecting personal data, such as contact details, from partner organisations. 

Overview of Processing 

Connect2Trust maintains a processing register documenting structural personal data processing activities. Only personal data that is strictly necessary will be processed, with the shortest possible retention period. 

Connect2Trust may use personal data for marketing and advertising purposes related to CyberSQUAD, including email marketing, display media, and targeted ads. These activities aim to inform individuals about services or events that may be relevant to them. 

Users may see CyberSQUAD-related advertisements on external websites or social media. In some cases, this may involve sharing identifiers with external platforms to match or build target audiences. 

Connect2Trust uses integrated email tools from EventBrite to communicate with Attendees regarding current or past CyberSQUAD events. If a user registers for an event, their email address may be accessible to  Connect2Trust. 

Privacy-by-Design & Privacy-by-Default 

Connect2Trust applies Privacy-by-Design and Privacy-by-Default in the implementation and deployment of systems that process personal data for CyberSQUAD. 

Data Protection Officer 

Connect2Trust is not obligated to appoint a Data Protection Officer due to the limited scope of its processing activities. 

Duty to Report Data Breaches 

Connect2Trust logs all (suspected) data breaches and reports them when required. 

Principles for Processing Personal Data 

Connect2Trust informs participants about which data is collected and for what purpose in the context of CyberSQUAD. Participants consent to the registration of necessary business contact details.