European Economic Area Notice
Effective Date: May 1, 2022
Forescout provides to individuals in the European Economic Area, Switzerland and the United Kingdom this notice, which contains additional information for such individuals to supplement the Forescout Privacy Statement.
Data Controller Details: Forescout Technologies, Inc., 2400 Dallas Pkwy. Suite 230, Plano, Texas 75093 USA.
Legal Basis for Processing
We process your personal information on several different legal bases, as follows:
- Based on necessity to perform contracts with you: We need to process your personal information to answer questions and requests from you including job applications and when you complete forms requesting information or signing up for emails, trainings or webinars.
- Based on legitimate interests: We process personal information from you for security and safety; to detect and prevent fraud; to protect and defend the rights or property of others; or our own rights and interests. We consider your privacy interests in this regard and redact personal information to the largest extent practicable to avoid affecting your privacy rights.
- Based on compliance with legal obligations: We may need to process your personal information to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process.
- Based on your consent: If you opt-in to our mailing or call lists, and if you accept the placement of cookies in accordance with the Forescout Cookie Notice, you may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Transfer of Personal Data Outside of EEA+
Forescout and some of our affiliates and service providers are based in the United States, a country with respect to which the European Commission has not issued an adequacy decision. The transfers of your personal information to the United States are necessary for us to provide our sites because Forescout is located in the United States. If you do not wish to have your personal information transferred to the United States, do not initiate such transfers by using or submitting information through our sites. We also rely on mechanisms such as Standard Contractual Clauses to assure adequate protection of personal information. Forescout has undertaken a Transfer Impact Assessment to document compliance with EU Data Protection Regulations. Due to the limited nature of the personal information collected by Forescout, and our focus as a network security company providing our services mainly to other businesses, we are unlikely to be the focus of government surveillance as it regards a specific individual.
Period of Data Storage
Forescout will process your personal information: for the purposes for which it was collected, to provide you with use of sites, for legitimate purposes, in accordance with a contract, and where required or allowed under law. We retain online account related personal information unless you have requested that Forescout permanently delete your data, as described below in the “Data Subject Rights” section. When we no longer need to retain your personal information, we will remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it, unless we need to keep your personal information to comply with legal or regulatory obligations, or to preserve evidence within the statutes of limitation.
Data Subject Rights
You may have a right to request from Forescout access to and rectification or erasure of your personal information, restriction of processing, data portability, and to lodge a complaint with a supervisory authority. You may also have a right to object to processing. Please note that these rights might be limited under applicable data protection law. If you would like to exercise any of the above rights, please submit your request to our Data Subject Request Web Portal.