“Personal information” is generally considered to be any information about an identified individual or that can be used (directly or indirectly) to identify an individual. For example, an individual’s name, e-mail address, phone number, online identifier, IP address or photo. Information that has been anonymized, and from which no individual can be identified either directly or in combination with other data, is not personal information.
ThinkRisk collects personal information that you provide to us directly, that we collect automatically when you access and use ThinkRisk website and products, and that is provided to us by third parties or through publicly available sources.
Personal information you provide to us directly:
Personal information collected while accessing and using ThinkRisk websites :
Personal information provided by publicly available sources:
We will also use personal information for other purposes as legally required.
For personal information that is subject to the General Data Protection Regulation (GDPR), the lawful basis for collecting and using your personal information is consent, where you have given consent, or our legitimate interests (which are not overridden by your data protection interests), such as operating our business, understanding and improving our products, direct marketing related to our products and services, hosting events, communicating with our customers and their users about our products, services, improving our websites and protecting our legal rights and interests. Where consent is the legal basis, you may withdraw that consent at any time. Where we are using your personal information for our legitimate interests, you have the right to object to that use. See below under Your Rights for how to withdraw consent or object. If you have any questions about the lawful basis upon which we collect and use your personal data, please contact us as noted below.
ThinkRisk does not sell or distribute personal information to third parties. ThinkRisk will only share your personal information as provided below
We retain personal information only for as long as necessary to achieve our stated purposes, or as required by applicable law. After such time, we will delete, archive, or anonymize your personal information. We will store your personal information securely until it is deleted.
You may request to delete your personal information at any time. See below under Your Rights for further information on how to do this.
You have certain rights in respect of your personal information. These rights are set out below.
ThinkRisk Inc. shall ensure that consent is sought from an employee or customer where contractually required for collection, use, or disclosure of information and the employee or customer whose consent is sought has full understanding of the reason the consent is being sought
Questions Regarding consent
ThinkRisk Inc. shall ensure that the contractual terms and consent note agreed with the client is strictly followed when ThinkRisk Inc. employee is required to collect customer details. In cases where an employee is unsure as to whether there is a requirement to obtain consent prior to the collection of employee personal information, the employee shall seek guidance from the privacy team.
Where we have relied on your consent to use your personal information, you have the right to withdraw that consent at any time by contacting us by sending an email to Privacy@thinkrisk.ai requesting that we remove the information
You have the right to lodge a complaint with a supervisory authority (i.e., the independent public authority responsible for monitoring data protection laws in your country).
5 Wright St, Scotch Plains, NJ 07076, USA