Purpose of this information notice

作为与专属网络(以下简称“EXN”)互动的IT安全业务专业人士,或与专属网络后台办公室或管理团队互动的专业人士, certain of your employees’ personal data, 在2016年4月27日欧洲议会和理事会关于在处理个人数据方面保护自然人和此类数据自由流动的欧洲法规2016/679(“GDPR”)第4(1)条的意义上, may be collected and processed by EXN in the ordinary course of its business activities.

In accordance with Articles 13 and 14 of the GDPR, this notice aims to properly inform your employees, on their capacity as data subjects, of the processing that is likely to be carried out by EXN and pertaining to their personal data.

鉴于您与您的员工的直接关系,他们的个人数据被披露给EXN并由EXN处理, 你必须, 并全权负责, 自EXN通知您之日起十五(15)天内,向他们提供本通知中包含的信息.

Third-party Information notice on the collection of personal data (Article 13 of the GDPR)

In the ordinary course of its business, EXN (GDPR第4(7)条所指的控制人)可收集和处理与下列数据主体类别有关的某些个人数据.

EXN may collect and process personal data pertaining to:

  1. 它的前景
  2. Employees of EXN clients (resellers)
  3. 员工的最终用户
  4. 供应商的员工
  5. Employees of EXN’s service providers
  6. 员工的代理/ IOR
  7. 求职者

Depending on your personal situation, please refer to the relevant part of this page.

下一节“你的权利无论您的个人情况如何,GDPR(以及任何适用的国家法律)均适用于您作为数据主体的权利:

你的权利

In accordance with applicable laws, 你有进入的权利, 对整改, 要擦除, 对处理的限制, 数据可移植性, to object to the processing of your personal data, and not to be subject to a decision based solely on automated processing. Where we are processing data based on your consent (notably regarding the deposit of cookies), you have the right to withdraw that consent at any time.

这些权利不是绝对的,可以在GDPR第15至22条规定的条件下行使. 你可以使用它们, subject to the provision of a proof of identity, 与总法律顾问, at: DPO@showbox-appdownload.com.

违反有关保护个人数据的适用规定,特别是GDPR, you may lodge a complaint with the national data protection supervisory authority.

1. 如果你是潜在客户:

a. Categories of personal data processed

EXN may collect the following personal data: name, 姓, 专业的电子邮件, 专业的电话号码, 职称, pictures if you attend 市场营销 events.

b. Purposes of personal data processing

EXN processes your personal data for the following purposes:

  • 一般商业目的;
  • 扩大市场份额;
  • 组织营销活动和活动(代表我们或供应商或经销商);
  • 利用社交网络或其他沟通渠道,在内部或外部围绕这些事件进行沟通;
  • Documenting to vendors what 市场营销 events have been organized;
  • Profiling of your 专业的兴趣.

c. 法律 basis for data processing operations

这些个人数据处理活动由EXN执行以追求其合法利益(根据第6(1)条), f) GDPR).

d. The categories of recipients of personal data collected

Your personal data is communicated:

  • 在EXN, to the authorized staff of the 市场营销, 销售, 预售, 服务 and 金融 departments as well as IT administrators and management teams;
  • To 供应商 (to report 销售 opportunity);
  • To EXN Group affiliated entities.

请注意,您的一些个人数据可能被传输给位于欧盟以外的数据接收者. EXN informs you that these transfers are, 在适用情况下, 受欧盟委员会标准合约条款的机制所规管,因此符合GDPR第44至50条有关向第三国转移个人资料的要求.

e. Personal data retention period

EXN根据适用法律规定的保留期限来存储您的个人数据, and the latest recommendations of the national data protection supervisory authority. 在任何情况下, EXN承诺将你的个人资料储存一段时间,但期间不得超过收集个人资料的目的所需要的时间.

Prospect’s employees identification data: 3 years as of the last contact from the prospect.

2. If you are an employee of EXN’s clients (resellers):

a. Categories of personal data processed

EXN may collect the following personal data: name, 姓, address, 专业的电子邮件, 职称, 专业的兴趣, 护照/身份证号码, pictures if you attend 市场营销 events.

b. Purposes of personal data processing
EXN processes your personal data for the following purposes:

  • 一般商业目的;
  • Making business reviews (internally, with vendors or with resellers);
  • Organization of 市场营销 campaign and events;
  • 利用社交网络或其他沟通渠道,在内部或外部围绕这些事件进行沟通;
  • 扩大市场份额;
  • Reporting to EXN’s vendors of 市场营销 campaigns/events;
  • Profiling of reseller’s 专业的兴趣;
  • Organizing travels for 市场营销 events;
  • Issuing transport documentation and coordination of shipments;
  • Providing professional 服务 (support, 培训, 安装, 维护……);
  • 合规 with export control regulations;
  • 合规 with 反腐败法;
  • 收集支付.

c. 法律 basis for data processing operations

这些个人数据处理活动由EXN执行以追求其合法利益(第6(1)条), f) GDPR).

d. The categories of recipients of the personal data collected

Your personal data is communicated:

  • 在EXN, to the authorized staff of the 市场营销, 销售, 预售, 服务, 金融, and order processing departments as well as IT administrators and management teams;
  • 政府当局;
  • 供应商;
  • 终端用户;
  • 承运人或代理人;
  • To EXN Group affiliated entities.

请注意,您的一些个人数据可能会传输给位于欧盟以外的数据收件人. EXN informs you that these transfers are, 在适用情况下, 受欧盟委员会标准合约条款的机制所规管,因此符合GDPR第44至50条有关向第三国转移个人资料的要求.

e. Personal data retention period

EXN根据适用法律规定的保留期限来存储您的个人数据, and the latest recommendations of the national data protection supervisory authority. 在还贷, EXN承诺存储您的个人数据的期限不超过为履行我们的法律和合同义务所必需的期限.

Clients’ employees identification data: 3 years as of the end of the contractual relationship; Passport/ID number: deletion immediately after the travel organization has been finalized.

3. If you are an employee of an end-user:

a. Categories of personal data processed

EXN may collect the following personal data: name, 姓, address, 专业的电子邮件, 专业的兴趣, 职称, pictures if you attend 市场营销 events.

b. Purposes of personal data processing
EXN processes your personal data for the following purposes:

  • 一般商业目的;
  • Making business reviews (internally, with vendors or with resellers);
  • Providing professional 服务 (support, 培训, 维护……);
  • Organizing 市场营销 campaign and events;
  • 利用社交网络或其他沟通渠道,在内部或外部围绕这些事件进行沟通;
  • Reporting to EXN’s vendors of such 市场营销 campaigns/events;
  • Profiling of the end user’s 专业的兴趣;
  • 扩大市场份额;
  • 合规 with export control regulations;
  • 合规 with 反腐败法;
  • Issuance of transport documentation and coordination of shipments.

c. 法律 basis for data processing operations
These personal data processing activities are implemented by EXN:

  • In pursuit of its legitimate interests (article 6(1), f) GDPR);
  • 使EXN遵守强加于EXN的法律义务(定义见GDPR第6(1)c)条):美国出口控制法规, 反腐败法.

d. The categories of recipients of the personal data collected
Your personal data is communicated:

  • 在EXN, to the authorized staff of the 金融, 销售, 预售, 市场营销, logistics and 服务 departments as well as IT administrators and management team;
  • 供应商;
  • 对经销商.
  • 承运人或代理人;
  • 政府当局;
  • To EXN Group affiliated entities.

请注意,您的一些个人数据可能会传输给位于欧盟以外的数据收件人. EXN informs you that these transfers are, 在适用情况下, 受欧盟委员会标准合约条款的机制所规管,因此符合GDPR第44至50条有关向第三国转移个人资料的要求.

e. Personal data retention period

EXN根据适用法律规定的保留期限来存储您的个人数据, and the latest recommendations of the national data protection supervisory authority. 在任何情况下, EXN承诺存储您的个人数据的期限不超过为履行我们的法律和合同义务所必需的期限.

最终用户员工身份证明数据:自合同关系终止之日起3年.

4. If you are an employee of EXN’ Vendor:

a. Categories of personal data processed

EXN may collect the following personal data: name, 姓, address, 专业的电子邮件, 职称, pictures if you attend 市场营销 events. [to be amended/completed at a local level, depending on the data mapping]

b. Purposes of personal data processing

EXN processes your personal data for the following purposes:

  • 一般商业目的;
  • Business Prospects, Resellers or end-users’ relationship management;
  • Performance of business contracts;
  • Communications needed when raising commercial documents (quotations, 采购订单, 交付笔记, invoices…) and distributing the products (hardware, 软件);
  • Organizing transportation and logistics;
  • 使商业评论;
  • B2B Direct 市场营销 activities and communication around those activities;
  • Performing professional 服务, enabling licenses;
  • Managing 金融 related matters.

c. 法律 basis for data processing operations

这些个人数据处理活动由EXN执行以追求其合法利益(第6(1)条), f) GDPR).

d. The categories of recipients of the personal data collected

Your personal data is communicated:

  • 在EXN, to the authorized staff of the 金融, 销售, 预售, 市场营销, logistics and 服务 departments as well as IT administrators and management team;
  • 经销商;
  • 终端用户;
  • To professional service providers;
  • 给代理人或IOR;
  • To EXN Group affiliated entities.

请注意,您的一些个人数据可能被传输给位于欧盟以外的数据接收者. EXN informs you that these transfers are, 在适用情况下, 受欧盟委员会标准合约条款的机制所规管,因此符合GDPR第44至50条有关向第三国转移个人资料的要求.

e. Personal data retention period

EXN根据适用法律规定的保留期限来存储您的个人数据, and the latest recommendations of the national data protection supervisory authority. 在任何情况下, EXN承诺存储您的个人数据的期限不超过为履行我们的法律和合同义务所必需的期限.

供应商’ employeesidentification data: 3 years as of the end of the contractual relationship.

5. I如果您是EXN的服务供应商(IT供应商/顾问/顾问/外部供应商)的雇员, 货运代理, 培训师, 银行, 保险, 审计师, external professional service providers):

a. Categories of personal data processed

EXN may collect the following personal data: name, 姓, 专业的电子邮件, 专业的电话号码, 职称, pictures if you attend to 市场营销 events.

b. Purposes of personal data processing

EXN processes your personal data for the following purposes:

  • 一般商业目的;
  • Have and maintain IT systems and related IT security;
  • 根据预先商定的工作范围(如组织物流/清关/组织营销活动/代表我们执行营销活动/维护公司账户/付款……)对EXN提供咨询或审计;
  • Provide resellers or end-users with professional 服务 in the IT security business (support, 培训, 安装, 咨询公司, 维护……).

c. 法律 basis for data processing operations

这些个人数据处理活动由EXN执行以追求其合法利益(第6(1)条), f) GDPR).

d. The categories of recipients of the personal data collected

Your personal data is communicated:

  • 在EXN, to the authorized staff of the 金融, 销售, 预售, 市场营销, logistics and 服务 departments as well as IT administrators and management team;
  • 外部审计师;
  • 供应商;
  • 经销商;
  • 终端用户;
  • To EXN Group affiliated entities.

请注意,您的一些个人数据可能会传输给位于欧盟以外的数据收件人. EXN informs you that these transfers are, 在适用情况下, 受欧盟委员会标准合约条款的机制所规管,因此符合GDPR第44至50条有关向第三国转移个人资料的要求.

e. Personal data retention period

EXN根据适用法律规定的保留期限来存储您的个人数据, and the latest recommendations of the national data protection supervisory authority. 在任何情况下, EXN承诺存储您的个人数据的期限不超过为履行我们的法律和合同义务所必需的期限.

Provider’s employees identificationdata: 3 years as of the end of the contractual relationship.

6. If you are an employee of an Agent/IOR (Importer of Records):

a. Categories of personal data processed

EXN may collect the following personal data: name, 姓, 专业的电子邮件, 专业的电话号码, 职称.

b. Purposes of personal data processing

EXN processes your personal data for the following purposes:

  • 清关;
  • Implementation and coordination of a logistics scheme;
  • Issuing and transferring logistics related documentation;
  • Perform 市场营销 campaign on our behalf;

c. 法律 basis for data processing operations

这些个人数据处理活动由EXN执行以追求其合法利益(第6(1)条), f) GDPR).

d. The categories of recipients of the personal data collected

Your personal data is communicated:

  • 在EXN, to the authorized staff of the 金融, 销售, 预售, logistics departments as well as IT administrators and management teams;
  • To EXN’s vendors, resellers or end-users;
  • 审计人员;
  • 政府部门;
  • To EXN Group affiliated entities.

请注意,您的一些个人数据可能会传输给位于欧盟以外的数据收件人. EXN informs you that these transfers are, 在适用情况下, 受欧盟委员会标准合约条款的机制所规管,因此符合GDPR第44至50条有关向第三国转移个人资料的要求.

e. Personal data retention period

EXN根据适用法律规定的保留期限来存储您的个人数据, and the latestrecommendations of the national data protection supervisory authority. 在任何情况下, EXN承诺存储您的个人数据的期限不超过为履行我们的法律和合同义务所必需的期限.

代理/IOR的员工身份证明数据:自合同关系结束之日起3年.

6. 如果你是求职者:

a. Categories of personal data processed

EXN may collect the following personal data: name, address, 爱好, 个人电子邮件, 出生日期, 电话号码, history of professional experience, 研究, 专业认证.

b. Purposes of personal data processing

EXN processes your personal data for the following purposes:

  • Recruitment purpose (current and future)

c. 法律 basis for data processing operations

这些个人数据处理活动由EXN执行以追求其合法利益(根据第6(1)条), f) GDPR).

d. The categories of recipients of the personal data collected

Your personal data is communicated:

  • 在EXN, to the authorized managers of any department recruiting employees;
  • To EXN Group affiliated entities.

请注意,您的一些个人数据可能被传输给位于欧盟以外的数据接收者. EXN informs you that these transfers are, 在适用情况下, 受欧盟委员会标准合约条款的机制所规管,因此符合GDPR第44至50条有关向第三国转移个人资料的要求.

e. Personal data retention period

EXN根据适用法律规定的保留期限来存储您的个人数据, and the latest of the national data protection supervisory authority. 在任何情况下, EXN承诺将你的个人资料储存一段时间,但期间不得超过收集个人资料的目的所需要的时间.

求职者’ personal data: 2年 as of the last contact with the applicant.