At SynScan, accessible from https://synscan.net, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by SynScan and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.
SynScan follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.
This website includes an embedded YouTube video on the main page. YouTube is a service provided by Google LLC. YouTube may place cookies on your device and collect usage data, such as:
This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in SynScan. This policy is not applicable to any information collected offline or via channels other than this website.
By using our website, you hereby consent to our Privacy Policy and agree to its Terms and Conditions.
If we contact a business by email for sales or partnership purposes, this section explains what personal data we hold about the recipient and why, as required by Articles 13 and 14 of the GDPR.
Who we are. SynScan is a trading name of Arall CyberSecurity, SLU, registered in Andorra. For privacy queries — and our postal address on request — contact [email protected].
What data we hold. A business contact's name, job title, corporate email address, and employer.
Where we obtained it. From Apollo.io (a third-party business-contact database) and from SynScan's own passive review of a company's public certificate-transparency records, which reveal its internet-facing assets. We do not build our contact lists from breach data.
Why we process it. To contact a professional at their company about that organisation's external attack surface and security exposure, and to offer a relevant service (attack-surface management).
Our legal basis. Legitimate interest (GDPR Art. 6(1)(f)) — offering a business a relevant security service based on its publicly visible external exposure, balanced against the recipient's rights. Where applicable, business-to-business messages are sent in line with national ePrivacy rules for legal entities.
How long we keep it. Only while the outreach purpose is live; we delete or permanently suppress the details on objection, or after 6 months with no engagement.
International transfers. We are established in Andorra, which the EU recognises as providing an adequate level of data protection, so data can be transferred to us without additional safeguards. Our data source Apollo (US) is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses.
Your rights. You can ask us to access, correct, or erase your data, or object to this processing — object once and we stop and suppress you permanently. To opt out, reply "stop" to any email or write to [email protected]. You also have the right to complain to your data protection authority.