European Economic Area Notice
Effective Date: August 15, 2024
Forescout provides to individuals in the European Economic Area, Switzerland and the United Kingdom thisnotice, which contains additional information for such individuals to supplement the Forescout Privacy Statement
Data Controller Details: Forescout Technologies, Inc., 300 Santana Row, Suite 400, San Jose, CA 95128 USA.
Legal Basis for Processing
We process your personal information on several different legal bases, as follows:
- Based on necessity to perform contracts with you – we need to process your personal information to answer questions and requests from you when you request additional information, sign up for emails, trainings, demos, portals, or webinars, or when you submit a job application.
- Based on legitimate interests – we process personal information from you for security and safety; to detect and prevent fraud; to protect and defend the rights or property of others; to run our business or our own rights and interests. We consider your privacy interests in this regard and redact personal information to the largest extent practicable to avoid affecting your privacy rights.
- Based on compliance with legal obligations – we may need to process your personal information to comply with relevant laws, regulatory requirements or to respond to lawful requests, court orders, and legal process.
- Based on your consent– if you opt-in to our mailing or call lists, schedule a demo, or if you accept the placement of cookies in accordance with the Forescout Cookie Notice. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Transfer of Personal Data Outside of EEA+
Forescout and some of our affiliates and service providers are based in the United States. The transfer of your personal information to the United States is necessary for us to provide our sites and services as Forescout is located in the United States. If you do not wish to have your personal information transferred to the United States, do not initiate such transfers by using or submitting information through our sites. We rely on the EU-U.S. Data Privacy Framework, the UK Extension of the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework for the transfer of personal information to the United States as described in the Forescout Privacy Statement. Where the Data Privacy Framework does not adequately cover the transfer of personal information, Forescout will continue to rely on the Standard Contractual Clauses to assure adequate protection of personal information. Forescout has undertaken a Transfer Impact Assessment to document compliance with EU Data Protection Regulations. Due to the limited nature of the personal information collected by Forescout, and our focus as a network security company providing our services mainly to other businesses, we are unlikely to be the focus of government surveillance regarding a specific individual.
Period of Data Storage
Forescout will process your personal information only for as long as necessary for the purposes for which it was collected, to provide you with use of the sites, for legitimate purposes, in accordance with a contract, and where required or allowed under applicable law. We retain online account related personal information for as long as your account is active and if you have opted in to receive marketing communications. When we no longer need to retain your personal information, we will remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it, unless we need to keep your personal information to comply with legal or regulatory obligations, or to preserve evidence within the statutes of limitation.
Data Subject Rights
You may have a right to request from Forescout access to and rectification or erasure of your personal information, restriction of processing, data portability, and to lodge a complaint with a supervisory authority. You may also have a right to object to processing. Please note that these rights might be limited under applicable data protection law. If you would like to exercise any of the above rights, please submit your request to our Data Subject Request Web Portal.