Global Privacy Policy &
Data Governance Charter

Adhering strictly to the statutory principle of Data Minimization under GDPR Art. 5(1)(c), we limit our collection of Personal Data to categories strictly necessary for fulfilling our B2B syndication mission and delivering technical insights. We categorize collected data as follows:

Every processing operation conducted by KyrosPub is grounded in an established statutory Lawful Basis under Article 6 of the GDPR:

• Contractual Performance (Art. 6(1)(b)): Necessary to create user accounts, deliver requested PDF whitepapers, provide customer support, and fulfill platform Terms of Use obligations.
• Legitimate Interests (Art. 6(1)(f)): Processing is necessary for our legitimate commercial interests in maintaining network security, preventing fraudulent downloads, refining our publication taxonomy, and conducting direct B2B marketing to professionals within relevant industry sectors, provided such interests are not overridden by the fundamental rights of data subjects.
• Explicit Opt-In Consent (Art. 6(1)(a)): Required when downloading gated research publications sponsored by third-party vendor partners, or when subscribing to tailored newsletter intelligence alerts.
• Statutory Compliance (Art. 6(1)(c)): Processing required to satisfy legal, accounting, tax, or regulatory audit obligations.

As a specialized B2B research vault and demand generation ecosystem, KyrosPub partners with technology enterprise vendors, cloud providers, cybersecurity firms, and research institutions ("Sponsors") to provide high-value technical whitepapers and benchmark studies at zero monetary cost to qualified professionals.

KyrosPub utilizes essential cookies, session storage, and privacy-preserving analytics scripts to maintain session integrity, authenticate logins, and measure publication reach.

We categorize tracking technologies into:

KyrosPub is a global B2B platform operating cloud infrastructure primarily situated in the United States and European Union. Consequently, your Personal Data may be accessed or transferred across international borders.

For data transfers originating from the European Economic Area (EEA) or United Kingdom to jurisdictions lacking an adequacy decision under GDPR Art. 45, KyrosB2B.com Inc. executes standard legal safeguards, including:

• European Commission Standard Contractual Clauses (SCCs - Implementing Decision (EU) 2021/914).
• UK International Data Transfer Agreement (IDTA) & Addendum under Section 119A Data Protection Act 2018.
• Strict technical measures including end-to-end TLS 1.3 encryption and zero-trust cloud isolation.

In compliance with Article 32 of the GDPR, KyrosPub maintains a multi-layered Enterprise Security Architecture designed to guarantee the confidentiality, integrity, availability, and resilience of our processing systems:

Personal Data is retained only for the duration necessary to satisfy the specific operational or legal purposes for which it was collected. Our automated Data Retention Schedule mandates:

• Active User Profiles: Retained for the active lifetime of your account plus 36 months following your last interaction or publication download.
• Consent Records & Audit Logs: Retained for 7 years to fulfill legal compliance verification under global anti-spam regulations.
• Technical Telemetry Logs: Anonymized or purged automatically after 180 days.

Under applicable European, UK, and international privacy laws, Data Subjects possess enforceable rights regarding their Personal Data:

This section applies strictly to California residents under the California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 ("CCPA/CPRA").

KyrosPub Services are strictly designed for professional B2B audiences and enterprise executives. We do not knowingly solicit or collect Personal Data from individuals under sixteen (16) years of age. If we learn that a minor has provided Personal Data, we will delete the record immediately. Furthermore, we do not intentionally collect Special Categories of Personal Data (such as biometric data, health records, political beliefs, or trade union membership).

To exercise any of your statutory privacy rights, submit a Data Subject Access Request (DSAR), or communicate with our legal desk regarding this charter, please contact our Data Protection Officer: