Terms & Conditions
Terms of CIH's Subscription Services Agreement
1. Scope
1.1 These Terms of CIH's Subscription Services govern the use of Services provided by Cyber Intelligence House Pte. Ltd. a Singapore based company with Registration number 201508145R, having its registered address at 1 Nanson Road #03-00, 238909, Singapore (“CIH”)
1.2 The Service is intended for purchase and use by entities and organizations for their business and professional purposes.
1.3 CIH may update the terms of this Agreement from time to time in our sole discretion; CIH will provide Customer with written notice of any material change, and Customer’s renewal of their Subscription following such updates constitutes acceptance of the same.
1.4 If you enter into a separate written agreement with CIH concerning the services, the terms outlined in that separate written agreement will take precedence, rendering this Agreement null and void.
2. Definitions
For the purposes of these Terms of Service, the following terms shall have the meanings ascribed to them as follows:
2.1 “Affiliate” of a party means any corporation or other entity that such party directly or indirectly controls, is controlled by, or is under common control with. In this context, a party “controls” a corporation or other entity if it or any combination of it and/or its Affiliates owns more than fifty percent (50%) of the voting rights for (i) the board of directors, or (ii) other mechanism of control for such corporation or other entity.
2.2 “Customer” means the person or entity that subscribes to the Service.
2.3 “End-Customer(s)” means a client of the Customer to whom the Customer provides its own services by utilising CIH’s Service.
2.4 “End-Customer Data” means all End-Customer related electronic data or information submitted by Customer to the Services.
2.5 “Fees” means the fees payable by Customer to CIH for the Services subscription.
2.6 “Term” means the period in which Customer is authorized to utilize the Services. Each Term shall commence on the date of delivery of the Services.
2.7 “Services” means the products and services made available by CIH online.
2.8 “Users” means individuals who are authorized by Customer to use the Services, for whom subscriptions to the Services have been ordered. Users may include Customer’s employees and contractors.
2.9 “Order” means an order submitted by the Customer to CIH specifying the Service that the Customer orders, quantities and price agreed upon by the parties. Orders can be submitted by the Customer by using the forms or through the Service platform.
Customer accept these terms, and enter into an agreement with CIH (“Agreement”) by
(1) executing an Order with CIH that references these terms, or
(2) using the Service.
3. Service. Conditioned on the provisions in this Section 3 and the other terms and conditions of this Agreement and payment of the applicable Fees, CIH hereby grants Customer, for the Term (unless terminated as provided in this Agreement), a non-exclusive, non-transferable license to use the Service in the provision of its own services to End-Customers.
3.1 CIH Responsibilities for the Services.
(a) The Services shall be made available by CIH to Customer, subject to any unavailability caused by circumstances beyond CIH’s reasonable control, including any force majeure events as contemplated in Section 11.8 and any computer, communications, Internet service or hosting facility failures or delays involving hardware, software, power or other systems not within CIH’s possession or reasonable control, and denial of service attacks.
(b) It is acknowledged that the Services may be temporarily limited, interrupted or curtailed due to maintenance, repair, modifications, upgrades or relocation, or for CIH to rectify any situation that CIH considers that immediate rectification is required (collectively, the “Downtime”). In the circumstances, CIH shall use its best endeavours to provide Customer with timely updates on the resumption of the Services, and Customer shall be solely responsible for informing its End-Customers of the Downtime.
(c) It is further acknowledged that CIH is under no obligations to provide any written notification of any Downtime, unless the Downtime is expected to last more than four (4) hours and may affect the normal use of the Services.
(d) CIH reserves the right to make changes to the Services during the Term, provided that CIH will not materially reduce the capabilities provided by the Services.
3.2 Customer Responsibilities.
(a) Customer shall ensure compliance with all applicable laws and regulations at all times, including taking all reasonable precautions to prevent the disclosure of any End-Customer information, unless the disclosure of any End-Customer information is permitted or required by any applicable data protection laws.
(b) Customer shall be responsible for the accuracy, quality and legality of the End-Customer Data and of the means by which it was acquired.
(c) Customer shall (i) use commercially reasonable efforts to prevent unauthorized access to and/or use of the Services and shall notify CIH promptly of any such unauthorized access and/or use; and (ii) comply with all applicable laws and regulations in relation to provision of the Services. (iii) Where the Service involves security testing, the Customer represents and warrants that it has the appropriate authorizations from the owner of the assets, and/or hardware on which it tests.
(d) Customer shall not make any representations or warranties on behalf of CIH or in any way bind or attempt to bind CIH contractually or otherwise with any End-Customer(s).
(e) Customer shall not: (a) make the Services available to anyone other than Users; (b) use the Services to store or transmit infringing, libelous, or otherwise unlawful or tortious material, or to store or transmit material in violation of third-party privacy rights; (c) use the Services to store or transmit Malicious Code; (d) interfere with or disrupt the integrity or performance of the Services or third-party data contained therein; or (e) attempt to gain unauthorized access to the Services or their related systems or networks.
3.3 Restrictions. Customer shall not (and shall not authorize any third party to): (a) modify, translate, reverse engineer, decompile, disassemble, or create derivative works based on the Services; (b) circumvent any user limits or other timing, use or functionality restrictions built into the Services; (c) remove any proprietary notices, labels, or marks from the Services; (d) frame or mirror any content forming part of the Services; or (e) access the Services in order to (i) build a competitive product or service, or (ii) copy any ideas, features, functions or graphics of the Services.
3.4 Ownership and Proprietary Rights. CIH own shall retain all right, title and interest (including without limitation all patent rights, copyrights, trademark rights, trade secret rights and other intellectual property rights), in and to the Services. Customer agrees that only CIH shall have the right to maintain, enhance or otherwise modify the Services. Except as expressly set forth in this Section 3, CIH reserves all rights and grants Customer no licenses of any kind, whether by implication, estoppel, or otherwise.
3.5 Subscriptions. Unless otherwise specified in this Agreement, (i) access to the Services is purchased as subscriptions and may be accessed by no more than the specified number of Users, (ii) subscriptions are for designated Users only and cannot be shared or used by more than one User but may be reassigned to new Users replacing former Users who no longer require ongoing use of the Services. The subscription is limited for the Customer use and may not be shared with its Affiliates or other group companies.
4. Services Setup And Operation
4.1 Launch of the Services with Customer. Upon execution of this Agreement, the Customer shall be entitled to use the Services.
4.2. CIH Protection of End-Customer Data. It is agreed that CIH shall have access to the End-Customer Data to provide the Services, and it is the Customer’s sole responsibility to ensure that all consents from End-Customers are obtained for the use by CIH of the End-Customer Data. CIH shall maintain commercially reasonable administrative, physical, and technical safeguards for protection of the security, confidentiality and integrity of End-Customer Data. CIH shall not (a) modify End-Customer Data except to the extent required to provide the Services, (b) disclose End-Customer Data except as compelled by law or as expressly permitted in writing by Customer or the applicable End-Customer, or (c) access End-Customer Data except to provide the Services and prevent or address service or technical problems, or at Customer’s request in connection with support matters, or to investigate potential misuse of the Services.
4.3 Additional Services.
During the Subscription term, the Customer may purchase additional services from CIH.
The scope of Additional Services encompasses the following products:
– Assessments
– Monitoring
a) Invoicing: Additional Services will be invoiced in accordance with the terms specified in the Order(s).
b) Subscription and validity: Additional Services are acquired in predetermined quantities and shall remain valid indefinitely, provided that the subscription is maintained. Termination or expiry of the subscription will result in the expiration of Additional Services.
c) Assessment details: Each quantity of Assessments is tailored for a single End-Customer organization and maintains its active status for a duration of seven (7) days.
d) Monitoring Account allocation: Each quantity/account for Monitoring is allocated for a single End-Customer organization.
5. Payment Terms And Taxes
5.1 Pricing and Responsibility. Customer is solely responsible for payment to CIH for all Fees for the Services. CIH is obligated only to Customer, with which it is in privity of contract, and not to Customer’s End-Customers, with whom CIH is not in privity of contract. End-Customers are not to be deemed third-party beneficiaries of this Agreement.
5.2 Fees. Customer shall pay applicable Fees for the Service. Except as otherwise specified in this Agreement, (i) Fees are based on licenses purchased for the Services, (ii) payment obligations are non-cancellable and Fees paid are non-refundable.
5.3 Payment Terms. All payments must be made in the currency specified in the purchasing form. Any outstanding amounts not paid by the due date will incur interest at an annual rate of 15% or the maximum rate permitted by law if it is lower than 15%
5.4 Suspension of Services. If any amount owing by Customer under this or any other agreement for the Services is thirty (30) or more days overdue, CIH may, without limiting CIH’s other rights and remedies, suspend provision of the Services to Customer until such amounts are paid in full.
5.5. Reactivation fee. CIH retains the right to impose a reactivation fee of 250 EUR for each reactivation of a suspended Customer account resulting from overdue payments.
5.6 Taxes. Unless otherwise stated, the Fees do not include any taxes, levies, duties or similar governmental assessments of any nature, including but not limited to value-added, goods and services, harmonized, sales, use or withholding taxes, assessable by any local, state, provincial, federal or foreign jurisdiction (collectively, "Taxes").
6. Confidentiality
6.1 Definition of Confidential Information. “Confidential Information” means any and all information disclosed by either party to the other which is marked “confidential” or “proprietary”, or which the recipient knows or has reason to know is regarded by the disclosing party as such, including oral information. “Confidential Information” does not include any information that the receiving party can demonstrate by its written records: (a) was known to it prior to its disclosure hereunder by the disclosing party; (b) is or becomes known through no wrongful act of the receiving party; (c) has been rightfully received from a third party authorized to make such a disclosure; (d) is independently developed by the receiving party; (e) has been approved for release with the disclosing party’s prior written authorization; or (f) has been disclosed by court order or as otherwise required by law, provided that the party required to disclose the information provides prompt advance notice to enable the other party to seek a protective order or otherwise prevent such disclosure.
6.2 Obligation. Neither party will use any Confidential Information of the disclosing party except as necessary to exercise its rights or perform its obligations pursuant to this Agreement or as expressly authorized in writing by the other party. Each party shall use the same degree of care to protect the disclosing party’s Confidential Information as it uses to protect its own confidential information of like nature, but in no circumstances less than reasonable care. Neither party shall disclose the other party’s Confidential Information to any person or entity other than its officers, employees, consultants and legal advisors who need access to such Confidential Information in order to effect the intent of the Agreement and who have entered into written confidentiality agreements with it as least as restrictive as those this Section 5. Upon any termination of this Agreement, the receiving party will promptly return to the disclosing party or destroy, at the disclosing party’s option, all of the disclosing party’s Confidential Information.
6.3 Injunctive Relief. Each party acknowledges that due to the unique nature of the other party’s Confidential Information, the disclosing party may not have an adequate remedy in money or damages in the event of any unauthorized use or disclosure of its Confidential Information. In addition to any other remedies that may be available in law, in equity or otherwise, the disclosing party shall be entitled to seek injunctive relief to prevent such unauthorized use or disclosure.
6.4 Other Exemptions. Notwithstanding the foregoing provisions in this Section 6, the parties may disclose this Agreement: (i) as otherwise required by law or the rules of any stock exchange, (ii) in confidence to legal counsel, (iii) in connection with the requirements of a public offering or securities filing provided reasonable measures are used to obtain confidential treatment for the proposed disclosure, to the extent such treatment is available, (iv) in connection with the enforcement of this Agreement or any rights under this Agreement,
provided that reasonable measures are used to preserve the confidentiality of this Agreement, (v) in confidence, to auditors, accountants, legal counsel and their advisors, (vi) in confidence, in connection with a change of control or potential change of control of a party or an Affiliate of a party, provided that reasonable measures are used to preserve the confidentiality of the Agreement. For any legally compelled disclosure or disclosure pursuant to a court, regulatory, or securities filing, the parties shall reasonably cooperate to limit disclosure.
6.5 Compelled Disclosure. If a receiving party is compelled by law to disclose Confidential Information of a disclosing party, it shall provide the disclosing party with prior notice of such compelled disclosure (to the extent legally permitted) and reasonable assistance, at the disclosing party's cost, if the disclosing party wishes to contest the disclosure.
7. Warranties And Disclaimers
7.1 Warranties.
(a) Each Party warrants to the other Party that:
(i) such Party is a business duly incorporated, validly existing, and in good standing under the laws of its jurisdiction of incorporation;
(ii) such Party has all requisite corporate power, financial capacity, and authority to execute, deliver, and perform its obligations under this Agreement;
(iii) the execution, delivery, and performance of this Agreement constitutes the legal, valid, and binding agreement of such Party;
7.2 Disclaimer.
(a) THE SERVICES ARE PROVIDED “AS IS” AND WITHOUT ANY REPRESENTATIONS, WARRANTIES AND/OR CONDITIONS OF ANY KIND.
(b) CIH AND ITS LICENSORS AND/OR SUPPLIERS MAKE NO REPRESENTATION AND GIVE NO WARRANTY OR CONDITION, EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE REGARDING THE SERVICES PROVIDED UNDER THIS AGREEMENT AND CIH SPECIFICALLY DISCLAIMS ANY AND ALL IMPLIED REPRESENTATIONS, WARRANTIES AND/OR CONDITIONS OF MERCHANTABILITY, MERCHANTABLE QUALITY, NON-INFRINGEMENT, DURABILITY, TITLE AND FITNESS FOR A PARTICULAR PURPOSE.
(c) CUSTOMER ACKNOWLEDGES THAT CIH DOES NOT REPRESENT OR WARRANT OR PROVIDE ANY CONDITIONS THAT THE SERVICES WILL BE ERROR-FREE OR WORK WITHOUT INTERRUPTIONS.
8. Term And Termination
8.1 Term. This Agreement shall commence as of the Subscription Start Date and shall continue in effect for a term (such term referred to in this Agreement as the “Term”). The Term will automatically renew for an additional Term with the price listed on the applicable Order unless (i) Customer purchased a TestDrive subscription that is non-renewable, (ii) either party provides the other with written notice of its election not to renew at least 30 days prior to the renewal date, or (iii) otherwise indicated on the Order. Any renewal will be invoiced with the prices indicated on the applicable Order. In connection with any renewal term, CIH reserves the right to change the prices for any subsequent Term, upon providing Customer written notice thereof (which may be provided by e-mail) at least 90 days before the new rates take effect. Following notice of a price adjustment, customers will have the right to terminate their subscription if they do not accept the new pricing terms.
8.2 Termination. This Agreement may be terminated as follows: (a) if Customer fails to make any payment due hereunder within thirty (30) days after receiving written notice from CIH that such payment is delinquent, CIH may terminate this Agreement on written notice to Customer at any time following the end of such period; (b) if either party breaches any material term or condition of this Agreement and fails to cure such breach within thirty (30) days after receiving written notice of the breach, the non-breaching party may terminate this Agreement on written notice at any time following the end of such thirty (30) day period; (c) if either party becomes insolvent (i.e., becomes unable to pay its debts in the ordinary course of business as they come due) or makes an assignment for the benefit of creditors, then the other party may terminate this Agreement immediately upon notice.
8.3 Survival. The following sections shall survive the termination or expiration of this Agreement for any reason: 1, 3.4, 6, 7, 8.3, 8.4, 9, 11 and any payment obligations incurred prior to the expiration or termination of this Agreement.
8.4 Effect of Termination. Upon expiration or termination of this Agreement, Customer shall cease all use of the Services, and shall promptly return all copies of any CIH confidential materials received to CIH or else destroy those copies and provide assurances to CIH that it has done so.
9 Indemnification.
9.1. Indemnification by CIH. CIH will indemnify, defend, and protect Customer from any liabilities, damages, and costs (including settlement expenses and reasonable attorneys' fees) resulting from a third-party claim that the Service infringes or misappropriates any intellectual property rights. However, CIH will not be liable under this section if the infringement arises from: (i) the Service use in a manner not specified in the Agreement or in combination with materials not provided by CIH, or (ii) any content, information, or data supplied by Customer or other third parties. If the Service faces or is likely to face an infringement claim, CIH will, at its discretion and expense, either: (i) secure the right for Customer to continue using the Service, (ii) replace or modify the Service to be non-infringing and substantially similar to the infringing Service, or (iii) if options (i) and (ii) are not feasible despite CIH’s reasonable efforts, terminate Customer’s rights to use the infringing Service and refund any prepaid fees for the infringing portion of the Service on a pro-rata basis. The remedies provided to Customer under this Section 8.1 are Customer’s exclusive remedy for any alleged infringement by the Service of any patent, copyright, or other proprietary right.
9.2 Indemnification by Customer. Customer will indemnify, defend, and protect CIH from any liabilities, damages, and costs (including settlement expenses and reasonable attorneys' fees) resulting from a third-party claim arising from: (i) Customer's use of the Service in violation of applicable laws, or (ii) Customer's breach of the representations and warranties made in Sections 3.2 and 7.1 of this Agreement.
10. Limitation Of Liability
10.1 Under no circumstances shall either party be liable to the other party for any lost profits or costs of procurement of substitute goods or services, or for any incidental punitive, indirect, special or consequential damages, however caused, and any claims to be made shall be subject to the limitations set out in this Section 10.
10.2 Except for breach of either party’s confidentiality obligations, the aggregate liability of each party in respect of any claims as a result of any breach of this Agreement shall not exceed the sum of fees paid by Customer. With regard to breach of confidentiality obligations, each party’s liability shall not exceed fifty thousand dollars ($50,000)
10.3 It is agreed that no claims shall be brought unless notice in writing of any such claim (specifying in reasonable detail the nature of the breach and the amount claimed in respect thereof) has been given to the other party during the Term, and no claims shall be brought against either party upon the termination of this Agreement.
10.4 Customer shall not be entitled to bring a claim against CIH until and after:
(a) CIH has been given reasonable opportunity to remedy the breach and/or to take such steps and actions as CIH may deem appropriate to avoid or mitigate the effect of such said breach within a period of thirty (30) days; and
(b) Customer has given written notice to CIH prior to the expiry or termination of this Agreement (specifying (a) in reasonable detail the facts and circumstances on which the claim is based; (b) the documentary evidence in support of the claim as reasonably available to the Purchaser; and (c) the amount claimed in respect thereof).
11. General
11.1 Assignment. Neither party may assign any of its rights or delegate any of its obligations under this Agreement, whether by operation of law or otherwise, without the prior express written consent of the other party, which shall not be unreasonably withheld or delayed. Notwithstanding the foregoing, CIH may assign this Agreement with notice to Customer in connection with any merger or acquisition or sale of all or substantially all of CIH’s or any of its Affiliate’s assets or stock (such notice to be delivered within thirty (30) days of such assignment). Such assignment will not in any event relieve the assignor of any obligations that accrue under this Agreement prior to any such assignment. Subject to the foregoing, this Agreement will bind and inure to the benefit of the parties, their respective successors and
permitted assigns. Any attempted assignment in violation of this Section 11.1 shall be null and void.
11.2 Compliance with Laws. Each party shall comply with all applicable laws and regulations regarding the general conduct of business including without limitation all relevant anti-corruption and antibribery laws. Customer agrees to fully comply with all export, re-export and import restrictions and regulations of all agencies and/or authorities of any applicable countries.
11.3 Notices. All notices, demands or consents required or permitted under this Agreement shall be in writing and delivered to the addresses set forth above. Notice shall be considered delivered and effective on the earlier of actual receipt or when (a) personally delivered; (b) the day following transmission if sent by e-mail or facsimile when followed by written confirmation by registered overnight carrier or certified mail; or (c) one (1) day after posting when sent by registered private overnight carrier (e.g., DHL, Federal Express, etc.); or (d) five (5) days after posting when sent by certified mail. Notice shall be sent to the parties at the addresses set forth on the first page of this Agreement or at such other address as shall be specified by either party to the other in a notice in accordance with this Section 11.3.
11.4 CIH Affiliates and Contractors. CIH may use one or more Affiliates or contractors to perform its obligations under this Agreement, provided that such use will not affect CIH’s obligations hereunder.
11.5 No Third Party Rights. The Contracts (Rights of Third Parties) Act 2001 of the Republic of Singapore (“Act”) shall not apply to any term of this Agreement, whether expressly or by implication. A person who is not a party to this Agreement shall have no right under the Act to enforce any term(s) of this Agreement.
11.6 Independent Contractors. The parties are independent contractors. This Agreement does not create a legal partnership (notwithstanding any use of the term “partner” by the parties, which if used is meant only to convey a spirit of cooperation between the parties), joint venture, agency, employee/employer, relationship, or franchisee/franchisor relationship between the parties. Neither party shall have any right, power or authority to create any obligation or responsibility on behalf of the other.
11.7 Severability. If any provision of this Agreement is held by a court of competent jurisdiction to be contrary to law, such provision shall be changed and interpreted so as to best accomplish the objectives of the original provision to the fullest extent allowed by law and the remaining provisions of this Agreement shall remain in full force and effect.
11.8 Force Majeure. Except for each party’s obligations to pay money, neither party shall be deemed to be in breach of this Agreement for any failure or delay in performance caused by reasons beyond its reasonable control, including but not limited to acts of God, earthquakes, wars, terrorism, communication failures, strikes or shortages of materials.
11.9 Choice of Law; Jurisdiction; Venue. This Agreement shall be governed by the laws of Singapore, SINGAPORE without regard to its conflict of law principles. The parties irrevocably attorn to the exclusive jurisdiction of the courts of Singapore, SINGAPORE. No choice of laws rules of any jurisdiction shall apply to this Agreement. The application of the United Nations Convention on Contracts for the International Sale of Goods to this Agreement
is expressly excluded. The parties confirm that it is their wish that this Agreement as well as all other documents relating to this Agreement, including notices, be drawn up in English only.
CIH DATA PROCESSING ANNEX
Data Processing Annex
This Data Processing Annex ("DPA") is entered into by and between the Customer and CIH, and forms an integral part of the agreement between the parties (the "Agreement").
WHEREAS, Customer has engaged CIH to provide services as set forth in the Agreement; and
WHEREAS, in the course of providing the services under the Agreement, CIH may process Personal Data (as defined below) on behalf of Customer, and in doing so, Customer is the data controller and CIH is the data processor under applicable data protection laws;
NOW, THEREFORE, in consideration of the mutual covenants set forth herein and other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the parties hereby agree as follows:
1. Definitions
1.1 "Data Protection Laws" means all applicable laws and regulations relating to the processing of Personal Data, including but not limited to the General Data Protection Regulation (EU) 2016/679 ("GDPR"), where applicable, and any national implementing laws, regulations, and secondary legislation in any Member State of the European Union or the United Kingdom, and any successor legislation to the GDPR or such laws.
1.2 "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject") that is processed by CIH on behalf of Customer in connection with the Agreement.
1.3 "Processing" shall have the meaning set forth in the Data Protection Laws, and "Process" shall be construed accordingly.
2. Processing of Personal Data
2.1 Role of the Parties. Customer acknowledges and agrees that it is the data controller and CIH is the data processor in relation to Personal Data processed in connection with the Agreement. Each party shall comply with its respective obligations under applicable Data Protection Laws.
2.2 CIH's Processing of Personal Data. CIH shall only Process Personal Data on behalf of and in accordance with the instructions of Customer, unless otherwise required by applicable law. CIH shall promptly inform Customer if, in its opinion, an instruction infringes applicable Data Protection Laws.
2.3 Security Measures. CIH shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with the Processing of Personal Data. Such measures shall include, but not be limited to, measures to protect against unauthorized or unlawful Processing and against accidental loss, destruction, or damage.
2.4 Confidentiality of Personal Data. CIH shall ensure that persons authorized to Process Personal Data on its behalf have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.
3. Assistance to Customer
3.1 Customer Requests. CIH shall, taking into account the nature of the Processing and the information available to it, provide reasonable assistance to Customer in ensuring compliance with Customer’s obligations under Data Protection Laws, including but not limited to the exercise of data subjects’ rights
3.2 Data Security Breach Notification. In the event of a Personal Data breach, CIH shall notify Customer without undue delay after becoming aware of the breach, providing Customer with sufficient information to meet any obligations to report or inform Data Subjects of the Personal Data breach under Data Protection Laws.
4. Sub-processing
4.1 Authorization. Customer hereby authorizes CIH to engage Sub-processors to Process Personal Data on Customer's behalf. CIH shall inform Customer of any intended changes concerning the addition or replacement of Sub-processors, thereby giving Customer the opportunity to object to such changes.
4.2 Sub-processor Obligations. CIH shall impose data protection terms on any Sub-processor it engages that protect Personal Data to the same standard provided for by this Addendum.
5. Data Subject Rights
5.1 Rights of the Data Subject are outlined in the CIH Privacy Statement
6. Term and Termination
6.1 This Annex shall remain in force until the termination of the Agreement.
PRIVACY STATEMENT
Via the Cyber Intelligence House Platform (the “CIH Platform”), Cyber Intelligence House Pte. Ltd. (“Cyber Intelligence House”) enables cyber security professionals and investigators to discover and explore dark and deep web activity. Via the CIH Platform, Cyber Intelligence House and its clients are able to search detect, analyze, respond to,
report on, and prevent cybersecurity incidents (the “Services”). In order to access and use the Services, it is necessary to process Personal Data. In this Cyber Intelligence House Privacy Statement (“CIH Privacy Statement”), we inform you about the use of your Personal Data. The CIH Privacy Statement may be changed from time to time. An up to date version of the CIH Privacy Statement is at any time accessible via dashboard.cyberintelligence.house/privacy-policy.
Parties which collect and process your Personal Data
• In most situations, Cyber Intelligence House Pte. Ltd., headquartered at 1 Nanson
Road #03-00, 238909 Singapore and its clients are both the controllers of your Personal Data. Both parties determine the purposes and means for the processing of your Personal Data, in accordance with applicable law.
The type of Personal Data that we collect
We may collect the types of personal data, such as mentioned below, if and as far as those personal data are necessary to achieve the purpose(s) of collection.
• Personal names
• Work and/or home addresses
• Contact details, including email addresses and telephone numbers
• Aliases
• Social Media Account Names
The Purposes of the collection and use of the Personal Data
The purposes of the processing of your Personal Data are:
• Delivery of the Services (use of the CIH Platform)
If we intend to process Personal Data for any other purpose which is not related to the purpose mentioned above, we will always inform you about that by modifying this CIH Privacy Statement.
The legal ground(s) for the processing of the Personal Data
We may process your Personal Data on one or more of the following legal grounds:
• Necessity for the purposes of the legitimate interest of Cyber Intelligence House and/or its clients, including – but not limited to – our interest to provide cybersecurity services in order to secure assets and personal and to protect outside threats.
The Parties with access to your Personal Data
Your Personal Data shall only be accessible to and be shared with persons and parties who need to have access to the specific Personal Data. In practice, the following persons and parties may have access to your Personal Data:
• Employees of Cyber Intelligence House who require access to the Personal Data to perform their work.
• Contractors of Cyber Intelligence House who are involved in providing the Services and our external storage provider.
• Employees of Cyber Intelligence House’ clients, who require access to the Personal Data to perform their work.
The period we keep the Personal Data
We will retain your Personal Data as long as needed to access and use the Services.
The protection of your personal data
• We will take all reasonable, appropriate security measures to protect your Personal Data against unauthorized access or alteration, disclosure or destruction and comply with the applicable security standards.
• If despite the security measures, there is a security incident that probably affects your privacy, we will inform you about the incident as soon as possible. We inform you about the measures we have taken to limit the impact and prevent repetition in the future.
Your rights regarding the processing of your Personal Data (and how to exercise these rights)
Based on applicable data protection laws, you have the following rights regarding the processing of your Personal Data
• The right to object to the use of your Personal Data, for example, if you believe that the use of your Personal Data is not necessary for the performance of our activities or to comply with a legal obligation.
• The right to access your Personal Data. This means that you can request insight into which Personal Data is being processed and the purposes for which such Personal Data is used.
• The right to correct your Personal Data. This means that in the event we process incorrect Personal Data, then you can request your Personal Data to be corrected.
• You can also ask us to limit the processing of your Personal Data also for a certain term limit, we need to assess your requests or objections.
• The right to have your Personal Data deleted from our systems, where there is no good reason for us continuing to process it.
• The right to have your Personal Data transferred to a third party.
You may exercise these rights by sending a letter (by mail or by email), that includes your name, address, telephone number and a copy of a valid ID to the Cyber Intelligence House at dpo@cyberintelligencehouse.com. Please make any social security number on the ID unreadable, before sending it to Cyber Intelligence House. Please clearly mention which right you invoke and the reasons for it. We will provide you with a reply as soon as possible. You may also file a complaint about the use of your Personal Data with the competent Data Protection Authority.
