Privacy Policy

Processing personal information at Kriptos

Kriptos takes privacy seriously and we will process personal information in accordance with the applicable privacy laws at all times. Personal information is information that can be linked to a natural person.

We do not process personal data unless we have a legitimate basis for it. By processing is meant any operation or series of operations done with personal data, whether automated or not, e.g. collection, registration, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, delivery by transmission, distribution or any other means of making available, assembling or merging, limiting, deleting or destroying.

This privacy statement provides additional information about what personal information is collected, how the information is collected, what it is used for, what rights you have if personal information about you is registered with us, and what we do to protect your personal information.

Data Controller

The managing director of Kriptos is responsible for processing and is responsible for ensuring that all our processing of personal data about our customers is in accordance with the applicable privacy laws.

Personal data we collect

Kriptos collect information about you, through our interactions with you and through our products and services. You provide some of this information directly, and we get some of it by collecting data from our website or through your use of our products. The data we collect depends on the context of your interaction with us and the choices you make, including the privacy settings you chose. We also obtain some personal information about you through public third parties like for example LinkedIn.


We store information about you when you email us directly or write to us on chat. Please note that although over 90% of the mail we receive are encrypted, we cannot guarantee that inquiries you send to us directly via email are encrypted. We therefore encourage you not to send confidential, sensitive or other confidential information via email.


Our website may collect personal information such as: name, contact information such as your email address and demographic information. Our website uses the information in order to provide the best possible service, particularly to maintain a record of users, orders if applicable, and improve our products and services. Emails may be sent periodically through our site with special offers, new products and other advertising information that we consider relevant to you or that may provide you with any benefit, these emails will be sent to the address you provide and may be cancelled at any time.

Our website also uses cookies identify the pages that are visited and their frequency. This information is used only for statistical analysis and then the information is permanently deleted. You can delete cookies at any time from your computer in your web browser. However, cookies help us providing you with a better experience when you visit our website. You can accept or deny the use of cookies, however most browsers automatically accept cookies of websites you visit as it serves to improve the web service. You can also change your computer settings to decline cookies. If you decline you may not be able to use some of our services.Our website may contain links to our partners, other third parties or things that may be of interest to you. Once you click on these links and leave our page, we no longer have control over the site to which you are redirected and therefore we are not responsible for the terms or privacy or the protection of data on those other third parties. Such sites are subject to their own privacy statements, so it is recommended that you consult them to confirm that you agree with them.

Mailing lists

We create mailing lists of people and companies that may be interested in our products or services like webinars etc. These mailing lists are populated from people showing an interest in us either via mail, our website, our chat or any other communication mediums. We also gather leads through our partners and social media like LinkedIn. The personal data gathered is name, position title, work company, email address, country of residence and phone number. You can at any time let us know if you want to subscribe to our mailing list or if you want us to remove you.

Information related to communication with us

We store information provided through your communication with us, such as when you contact customer service or have another dialogue with us. This is, for example, information about the dialogue we have with you about your use of our services, emails you send us and problems you report. Our sales and marketing department will store information about you and your company if you have shown an interest in our product or services. We store this information in order to provide you with the best possible service when you contact us by knowing the history of your customer relationship. In addition, we may customize information we send you based on what questions you have asked our customer service.

Personal information gathered through the Kriptos product

The Kriptos product is not set up to gather any personal information when scanning files in order to classify them. Some personal information will however still be gathered, such as name of users who have created or edited the document and the id of the device which was scanned. Any personal information that is found in the document file name will also be collected. Kriptos therefore recommends that as part of an information security policy, no sensitive information is put into the file name of a file. Information is collected solely for the purpose of classifying files and for our reporting services as part of the application functionality. The information will not be used for anything else and will be written over when the client deletes or changes the name of the files.

Disclosure of personal information

Kriptos business philosophy is information security and data classification. We will therefore not sell, barter, share or in any other way attempt to make money of your personal data. You can therefore rest assured that the personal data collected will be used only for the purpose it was collected.

In cases where we use subcontractors who process personal data on our behalf, we sign our own data processing agreements and you can rest assured that your information will only be used for the purpose agreed with the supplier. This means, for example, that those who bill for us should only use the information they receive from us to bill, not anything else.

We use subcontractors to assist with the technical and administrative operation of our services, such as invoice services, IT platform operations, marketing, customer app application operation and the like.

For security reasons, we do not provide names of our subcontractors in this privacy statement.

Otherwise, we will not share your customer information with outsiders unless the disclosure of personal information occurs:

o With the consent of the data subject

o By law or regulation provided by law

o By order of a court or other authority, or

o As part of payment collection, etc. where there are factual reasons.

Your rights

Depending on your country of origin and the applicable legal requirements in that country you have certain rights concerning the processing of your personal information. We have made it easy for you by following a strict line for everyone.

Your rights include:

Information: Further information on how we process information about you.

Transparency: Copy of information we have about you.

Correction: Correct and supplement information about you.

Deletion: You can request the deletion of all personal data unless the information is required to provide a service that you still want to have access to, or that we are required by law to keep the information for a certain period of time. You can only request deletion of your own personal data.

Restriction: Ask that we limit the use of your information.

Objection: Ask that we do not use your direct marketing information, including profiling for use in direct marketing. You may also object to being subject to individual judicial decisions that are solely automated.

Inquiries and questions about privacy

If you are a customer please feel free to contact us at if you have any further questions, comments or need assistance in exercising your rights. We will respond to your inquiry as soon as possible and within one month at the latest.

If you believe that we process personal data unlawfully, we hope you first contact us so that we can assess your objections and resolve any misunderstandings.

Changes to the Privacy Statement

We will update the privacy statement if there are changes in our processing of personal data or changes in the legislation that require an update.

We want to make any change visible, but we generally recommend that you read this Privacy Statement on a regular basis when visiting our website. You will always find the latest version of our privacy statement on our website