Privacy Policy Introduction This privacy policy (“policy) explains how we process your personal data, incl. what we use it for and how we store and protect it. ​ Why? Because we care about your privacy. ​ Who are we? We are the entity responsible for the processing of your personal data in accordance with this policy. Here’s our information: COSS Systems Corp 3 West End Ave. Old Greenwich, CT 06870 USA Email: info@coss-systems.com Phone: 800-961-0288 To make the policy more user friendly we use “we”, “us”, “our” etc. to describe our company. When we talk about our “website” we mean www.cosserp.com, and the other sites and apps we own and operate. When we refer to “you” we mean you as a user of our website, app or customer of our online services or products. ​ Links to other websites etc. On our website, in our emails and on our social-media profiles, we may have links to other companies, apps or websites (“other websites”) that aren’t ours. This policy doesn’t cover how those other websites process your data. We encourage you to read the privacy notices on the other websites you visit. ​ Why, what and for long we process your data We process your personal data for these purposes: Purpose #1: Deliver our service & products We process your data deliver our services & products, contact you concerning our platform, carry out demos, ordered through the website. Here is the data we process: Your contact details such as name, email, title and telephone/mobile number The company you work for, incl. their domain, address and country Purchase history Your request, e.g. sign-up and use of our product, when you accepted our terms & conditions, when you signed up, when you requested a demo, when you contacted us for support etc. If you email us, we will collect the content of your message. What choices you made when you set up your account, when you became a customer, your user role, when you are logging into our product. Other interactions you have with us and our service, e.g customer support, account and product setup, customer feedback etc. Information about how you use our product and what services you and your company are subscribing to. We don’t process any sensitive data. We will keep these data for as long as they are necessary for the purposes for which they are being processed. As a general rule, data will be kept for as long as you use our product or services or have an account with us plus 5 years following the conclusion of your account / relationship with us. Special circumstances or legal requirements may entail that such periods may be shorter or longer, including for the purpose of complying with legal requirements for the erasure or keeping of data. If you are employed by one of our customers, we will keep your data as long as we have a business relationship with that customer. We collect your personal data: Directly from you Online sources, e.g. Linkedin Public authorities We do not sell or rent your data to marketers or third parties. Some of these grounds for processing your data overlap, so there may be several reasons which justify us processing your data. We may also use your data in other ways but we will inform you about these purposes when we collect your data. If you would like more information about our legal basis for processing your data, feel free to contact us (see our details in the beginning of the policy). Please note that special circumstances or legal requirements may mean that such periods may be shorter or longer, depending on the purpose of complying with legal requirements for the erasure or keeping of information. ​ Keeping your data safe We use reasonable organizational, technical and administrative measures to protect your data within our company. The Internet is not a 100% secure environment and that means we cannot guarantee the security of the data you transmit to us. Emails sent via the Internet might not be encrypted, so we advise you not to include any confidential or sensitive information in your emails to us. Third parties and processors We use companies (processors) to help us deliver our services to you, e.g. to provide the hosting environment for our product, send out newsletters, to help us run our website, manage our payment etc. When we use a processor we make sure that there is a legal agreement in place regarding how they will be handling data on our behalf. We’ll also make sure that they have appropriate security measures in place and if they are located outside the USA we’ll of course make sure that there is a legal agreement in place allowing us to give them access to the data (see more below). We share your personal data with: Suppliers and vendors that we work with to assist our company (meaning service providers, technical support, supply services, and financial institutions) Group entities • Public authorities Here’s are some of the suppliers we use: • Microsoft • E-One Solutions In the event that we are involved in a bankruptcy, merger, acquisition, reorganization, your information may be transferred as part of that transaction. This policy will continue to apply to your information also after the information has been transferred to the new entity. ​ Your rights You have these rights: Your right of access and rectification - You have the right to ask us for copies of your personal data or ask us to rectify information you think is inaccurate. There are some exemptions, which means you may not always receive all the information we process but as a main rule you can always contact us and ask for your information. Your right to erasure - You can ask us to erase your personal information in certain circumstances. You also have the right to have the processing of your personal data restricted. Your right to withdraw your consent: If processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent. You may withdraw your consent by sending an email to info@coss-systems.com. Your right to restriction of processing and object to processing - You have the right to ask us to restrict the processing of your information and a similar right to object to processing. Your right to data portability: You have the right to receive your personal information in a structured, commonly used and machine-readable format (data portability). Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data about you for such marketing. The law gives us one month to respond to you, but we will try to respond sooner. There may be conditions or limitations on these rights. It is therefore not certain e.g. you have the right of data portability in a specific case - this depends on the specific circumstances of the processing activity. You are always welcome to contact us and ask. The same goes for some of the other rights. Complaints You can always lodge a complaint with a data protection authority, for example with the FTC in the USA. Assistance and additional information You can take steps to exercise your rights by using the contact details above. If you have questions about the policy, feel free to contact us by using the contact details in this policy. ​ How to unsubscribe to email marketing material? If you’ve subscribed to our newsletters or asked to receive marketing material from us, you can always unsubscribe. In all these emails we include an unsubscribe link and you always click the link and easily unsubscribe. You can also unsubscribe by sending us an email to info@coss-systems.com Children and our services Our services and website aren’t directed to children, and you can’t use our services if you are under the age of 18. Changes to the policy Sometimes we need to make changes to this policy to reflect our current practices. We will take reasonable steps to let you know about changes via our website. If you are a registered user, we will notify you via email if significant changes are being made to the policy using the email address you gave us when you signed up. If you continue to use our website or services after the notification, we will regard this as your acceptance of our privacy practices.