Introduction
Welcome to The Ugly Duckling (www.theuglyduckling.dk). We are an industrial cybersecurity training provider utilizing role-playing as a hacking group to enhance cybersecurity awareness and preparedness. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, in compliance with the General Data Protection Regulation (GDPR).
Information We Collect
When you visit our website, we may collect the following types of information:
- Personal Information: Name, email address, phone number, company name, and any other details you provide via contact forms or registrations
- Technical Information: IP address, browser type, device information, and website usage data through cookies and analytics tools
- Training Interaction Data: Information related to your participation in our cybersecurity training programs.
Legal Basis for Processing Personal Data
Under GDPR, we process your personal data based on the following legal bases:
- Consent: When you provide your information voluntarily.
- Contractual Necessity: To provide you with requested services.
- Legitimate Interests: To improve and secure our services.
- Legal Compliance: To comply with legal obligations.
How We Use Your Information
We use the collected information to:
- Provide and manage our cybersecurity training services.
- Respond to inquiries and communicate with you.
- Improve our website and user experience.
- Monitor and analyze usage patterns for security purposes.
- Comply with legal obligations and protect against fraudulent activities.
How We Share Your Information
We do not sell or rent your personal information. However, we may share your information with:
- Service Providers: Third-party vendors that help us with hosting, analytics, and communication services.
- Legal Compliance: To provide you with requested services.
- Legitimate Interests: If required by law, or in response to legal processes or security concerns.
- Business Transfers: In the event of a merger, acquisition, or business restructuring.
Data Retention
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. When data is no longer needed, we securely delete or anonymize it.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to improve user experience and analyze website traffic. You can control or disable cookies through your browser settings.
Data Security
We implement industry-standard security measures to protect your data from unauthorized access, alteration, or disclosure. However, no method of transmission over the Internet is completely secure.
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of your data.
- Right to Rectification: You can request corrections to inaccurate data.
- Right to Erasure: You can request deletion of your data under certain conditions.
- Right to Restrict Processing: You can limit how we process your data.
- Right to Data Portability: You can request your data in a structured, machine-readable format.
- Right to Object: You can object to data processing under certain conditions.
- Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.
To exercise these rights, please contact us at hackers@theuglyduckling.dk. If you believe we have not adequately addressed your concerns, you have the right to file a complaint with the relevant data protection authority.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies.
Updates to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date.
Contact Us
If you have any questions about this Privacy Policy, please contact us.
