Cervus Defence & Security Limited (referred to as “Cervus” or “the company”” throughout this notice) are committed to being transparent about how we collect and use data and to meeting our data protection obligations. We respect your privacy and are determined to protect your personal data. The purpose of this privacy notice is to inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from). We’ll also tell you about your privacy rights and how the data protection laws protects you. What personal data do we collect from you? Website log data when you use this Website: including your IP address, the address of the web page you visited, your browser type and settings, the date and time of your access, how you used this Website. We may also collect information about the device you are using to access this Website: depending on the device you are using and its settings, this information may include the type of device, the device operating system, device settings, and unique device identifiers. Information you voluntarily provide in contact forms, registration forms and surveys, including (first and last) name, email address, telephone number and preferences and subscriptions to our newsletters.

What is your data used for?

Your data is used for the following purposes: Communication:

• enabling Cervus to address your requests and to respond to your messages;
• sending e-mail newsletters: provide you with content related to Cervus products, services and activities via e-mail;
• enabling content downloads related to Cervus products, services and activities (e.g. white papers…);
• personalising your Website visit: customise content and recommend content on this Website based on your interests and preferences;

Marketing: carrying out direct marketing, market research and surveys, via e-mail, SMS, over the phone, through push notifications / pop-up banners, instant messaging, through an operator, through social media pages, regarding Cervus products, services and activities; Profiling: creating a profile of you, by collecting and analysing information on the preferences you select and choices you make, as well as your general activities on this Website, to be able to provide you with relevant content, offers and services related to Cervus products, services and activities; Security: guaranteeing the security of this Website. The provision of your personal data is optional. Should you decide not to provide your personal data, Cervus may be unable to provide certain services to you.

What is the legal basis for the processing of your personal data?

In order to carry out the processing activities specified therein, Cervus relies on:

• its legitimate interest, which consists in proper communication and exchange of information between you and Cervus and in security of the Website;
• your consent, which you can withdraw at any time, without affecting the lawfulness of processing based thereon before its withdrawal, for the processing related to certain marketing and profiling activities.

How long do we keep your personal data?

The log data we collect to ensure the security of this Website are not kept longer than one year. For the other above mentioned purposes, your personal data will be kept for no longer than three years after their collection.

Who are the recipients of your personal data?

In the context of such processing, the recipients of all or part of your personal data will be the personnel of Cervus and other entities of the company in charge of the communication and the marketing, as well as some personnel of third parties, in charge of the hosting and maintenance of the Website, all such recipients being located within the European Economic Area (EEA).

Is your personal data transferred out of the European Economic Area?

The sharing of your personal data with certain recipients may imply transfers of your data out of the European Economic Area (EEA) in the countries where the entities of the company operate. Cervus pays particular attention to the protection of your personal data. Thus, where such transfers out of the EEA shall take place, Cervus implements appropriate safeguards.

What is Cervus’ cookie policy?

Please note that Cervus uses cookies while you are browsing this Website. You can learn more about the use of cookies by Cervus in the Cookie Policy section. What are your rights related to your personal data? Please note that you have the right to access your personal data and to request that your personal data be rectified or deleted. You are also entitled to request restriction of the processing of your personal data. In addition, you have the right to ask for receiving, in a structured and standard format, your personal data that you provided to Cervus and which Cervus processes by automated means. If you would like to exercise any of these rights or if you have any questions about this notice or our processing of your data more generally, please contact info@cervus.ai. If you believe that the company has not complied with your data protection rights, you can complain to the Information Commissioner’s Office (https://ico.org.uk/).