Privacy Notice for Visitors

Cellebrite GmbH  is committed to protecting the privacy and security of your personal data. This Privacy Notice explains how we collect, use, and store your personal data when you visit our offices and premises.

Data Controller

The data controller responsible for your personal data is Cellebrite GmbH, Herzog-Heinrich-Straße 20, 80336 Munich, Germany. You can contact us at Privacy@Cellebrite.com.

Personal Data We Collect

When you visit our offices and premises, we collect personal data about you, including your full name, the name of the person who invited you, your phone number, your ID number, an image of your face and the date and time of your entry and exit.  In the case of an armed guest entering the premises, we also collect the start & expiration date of your firearm license & carry type (Soldier/police/private). We do not collect any biometric data.

Additionally, we may collect static or moving imagery of you captured by our CCTV systems. Such data shall be processed also in accordance with our Use of Closed-Circuit Television (CCTV) Policy and Notice, accessible at: https://cellebrite.com/en/cellebrite-gmbh/.

You do not have a legal duty to provide us with your personal data. However, if you choose not to provide us with the personal data requested, your entry to our offices and premises might be denied.

Purpose of Data Collection

We collect your personal data for the purpose of ensuring the security and safety of our offices, sites, premises, employees, and visitors. We collect this data also to ensure that the confidentiality of the information available on our premises is maintained.

Legal Basis for Processing

The legal basis for the processing of your personal data is Art. 6 (1) point c GDPR in conjunction with Art. 32 GDPR as well as Art. 6 (1) point f GDPR. Our legitimate interest lies in the purposes mentioned above, i.e. ensuring IT security, the security of our premises, the security of our employees and visitors, and the confidentiality of the information available on our premises.

Disclosure of Your Personal Data

We may share your personal data with our family group of companies, including our headquarters in Israel, which is recognized by the European Commission as providing an adequate level of data protection. In the event of a criminal offence, a violation of our house rules or if required by law, the data may be transferred to security authorities or external lawyers. In addition, we pass on your personal data to service providers in order to manage and operate our access control systems. We currently use the services of Verkada, Inc. (406 E. 3rd Avenue, San Mateo, CA 94401, U.S.A.). Your data is stored on a tenant in Germany, but a data transfer to the U.S.A. cannot be completely ruled out. For this purpose, we have concluded standard contractual clauses with Verkada, Inc. to enable the secure transfer of personal data.

Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. We generally store data for one year after your visit.

Your Rights

Every data subject has the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure (‘right to be forgotten’) under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to data portability under Article 20 GDPR and the right of appeal to a data protection supervisory authority under Art. 77 GDPR.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) (f) GDPR. If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. The objection can be made informally using the contact details given above.

right.Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse or alteration. These measures include, but are not limited to, encryption, access controls, and regular security audits. While we strive to use commercially acceptable means to protect your personal data, it is important to acknowledge that no method of transmission over the Internet or method of electronic storage is fully secure. Therefore, we cannot guarantee absolute security.

Contact Information

If you have any questions or concerns about this Privacy Notice or your personal data, or if you wish to exercise any of your personal data rights, please contact our Data Protection Officer at Privacy@Cellebrite.com.