Cookie Notice

This Cookie Notice describes the types of cookies and similar tracking technologies used on the websites owned and operated by The Escal Institute of Advanced Technologies, Inc. doing business as SANS Institute, including sans.org, sans.edu, and giac.org, and related subdomains (collectively, the “Sites”). References to “SANS,” “we,” “us,” or “our” in this notice refer to The Escal Institute of Advanced Technologies, Inc. and its subsidiaries.

This Cookie Notice should be read together with the applicable Privacy Policy for the Site you are visiting: sans.org Privacy Policy, sans.edu Privacy Policy, and giac.org Privacy Policy. Each Privacy Policy provides further detail on how we collect, use, and protect personal information on the respective Site.

1. What Is a Cookie?

A cookie is a small text file placed on your device when you visit a website. Cookies and similar technologies allow websites to recognize your device, store your preferences, and collect information about how you interact with our Sites. The information collected may include pages visited, time spent on pages, language preferences, and other usage data.

Cookies are categorized in two ways:

• By source: First-party cookies are set directly by SANS. Third-party cookies are set by external service providers whose tools we have integrated into our Sites, such as analytics and advertising platforms.
• By duration: Session cookies are temporary and are deleted when you close your browser. Permanent cookies remain on your device after your browser is closed and allow the Site to recognize you on return visits.

2. What Categories of Cookies Do We Use?

We use four categories of cookies on our Sites, as described below. The specific cookies within each category, including their names and providers are listed in the tables below. You can access these cookies at any time via the “Cookie Notice” link at the bottom of any page on our Sites. The cookie list is maintained dynamically and reflects the current cookies in use.

3. Legal Basis for Processing

The legal basis on which we process personal information collected through cookies depends on your location and the category of cookie involved.

• Strictly necessary cookies: We process this data based on our legitimate interest in operating a functional and secure website, or as necessary to perform a contract with you.
• Functional, analytics, and targeting cookies: In jurisdictions subject to the EU General Data Protection Regulation (GDPR), UK General Data Protection Regulation (UK GDPR), or Singapore Personal Data Protection Act (PDPA), we rely on your consent as the legal basis for these cookies. In those jurisdictions, non-essential cookies will not be set until you have provided affirmative consent through our cookie management tool.
• US state privacy laws: For visitors in US states with applicable privacy laws, including California, Colorado, Connecticut, Virginia, and others, we provide the ability to opt out of cookies that involve the sale or sharing of personal information as defined under those laws. You may exercise this right through our cookie management tool or by enabling a Global Privacy Control (GPC) signal in your browser, which we will honor as an opt-out request.
• Australia: For visitors subject to the Australian Privacy Act 1988 and the Australian Privacy Principles, we provide clear notice of our cookie practices and a simple means to opt out of cookies used for direct marketing purposes.

4. How Do We Use the Information Collected Through Cookies?

We use the information collected through cookies and similar technologies for the following purposes:

• To operate and secure our Sites, including authentication, fraud prevention, and load balancing.
• To remember your preferences and personalize your experience.
• To measure how our Sites are used and to improve their design, content, and functionality.
• To understand the effectiveness of our marketing and advertising campaigns.
• To deliver advertising relevant to your interests, where you have consented or where permitted by applicable law.
• To comply with our legal obligations and enforce our terms.

5. Third-Party Cookies and Service Providers

Some cookies on our Sites are set by third-party service providers, including analytics platforms, marketing automation tools, and advertising networks. These providers may include Google Analytics, LinkedIn, YouTube, and others. Each third-party provider operates under its own privacy and cookie policies. Where personal information is transferred to these providers, we ensure that appropriate data processing agreements or equivalent safeguards are in place.

6. International Data Transfers

SANS operates globally and some of the cookies deployed on our Sites may involve the transfer of personal information to countries outside your jurisdiction, including to the United States. Where such transfers occur from the European Economic Area, the United Kingdom, or Singapore, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms recognized under applicable law.

7. How to Manage Your Cookie Preferences

You have several options for managing cookies:

Cookie Management Tool. You can review and update your cookie preferences at any time by clicking the “Cookie Settings” link below available at the Cookie Notice at the bottom of any page on our Sites. This tool allows you to accept or decline cookies by category, except for strictly necessary cookies.

Browser Settings.  Most browsers allow you to refuse cookies, delete existing cookies, or alert you when cookies are being set. The help function of your browser will tell you how to do this. Note that disabling cookies through your browser settings may affect the functionality of our Sites.

Global Privacy Control.  If you use a browser or browser extension that sends a Global Privacy Control (GPC) signal, we will treat that signal as an opt-out of the sale or sharing of your personal information where required by applicable US state privacy law.

8.  Retention

Strictly necessary cookies are generally session-based and expire when you close your browser or are retained only as long as needed for the specific function they serve. Functional and analytics cookies are retained for the period necessary to fulfill the stated purpose, typically no longer than 13 months. Targeting and advertising cookies are retained for the period set by the third-party provider, and all cookies are removed when no longer necessary or when consent is withdrawn. We review our cookie inventory periodically and remove cookies that are no longer necessary.

9.  Changes to This Cookie Notice

We may update this Cookie Notice from time to time to reflect changes in the cookies we use, changes in applicable law, or for other operational reasons. The “Last Revised” date at the top of this notice indicates when it was most recently updated. Where we make material changes, we will provide notice through our cookie management tool or through other appropriate means when you next visit our Sites.

10.  Contact Us

If you have questions or concerns about this Cookie Notice or about our use of cookies and similar technologies, please contact us at:

Email: privacy@sans.org

Post: The Escal Institute of Advanced Technologies, Inc. / SANS Institute 11200 Rockville Pike, Suite 200 North Bethesda, MD 20852 United States