Privacy policy - safesqr | we make your cybersec

This Privacy Policy and the Information Clauses contained herein describe the rules for handling personal data and using cookies and other technologies on www.safesqr.com.

The administrator of the website is Safesqr sp. z o. o . based in Katowice, 61 Piotrowicka St., 40 – 723 Katowice, NIP: 634-29-53-574, REGON: 382775067, Share capital: PLN 200,000

Information Clauses

1A. Information Clause

In accordance with Article 13 (1) and (2) of the General Data Protection Regulation of April 27, 2016. (GPDR) we inform you that:

  1. The administrator of your personal data is Safesqr sp. z o. o . with its registered office in Katowice, Kościuszki 61 St., 40 – 047 Katowice, NIP: 634-29-53-574, REGON: 382775067, Share capital: PLN 200,000.
  2. The IOD can be contacted via email at: biuro@safesqr.com
  3. Your personal data is processed on the basis of voluntary consent left by you in order to handle your inquiry via the contact form (on the basis of Article 6(1)(a) GPDR) or the inquiry form on the basis of Article 6(1)(b) GPDR.
  4. Your data will be stored for the purpose of properly handling inquiries for 90 days from the date of submitting an inquiry via the form. After this period, they will be deleted.
  5. If, as a result of your inquiry sent, you use our services and, as a consequence, you are in a correspondence relationship with one of our merchants, your data will be processed for the period of the ongoing cooperation, as well as for a further period resulting from generally applicable laws.
  6. The Administrator reserves the right to process your personal data collected in connection with the use of our services for a longer period of time than indicated in points 5 and 6, on the basis of the provision of Article 6 (1) (f) GPDR, in order to pursue its legitimate interests of pursuing claims against you and third parties in connection with the use of the Service, or to protect you against such claims, until such claims expire or are barred.
  7. Your data is processed by service providers acting on behalf of the Administrator, such as the hosting of the website where the consent form is located, and email. Some of our providers are based outside the European Union, but all are required to use standards that comply with the requirements of the GPDR. Our infrastructure is secured according to best practices and the website and web forms have SSL certificates.
  8. Provision of data is voluntary, but not doing it will mean that we will not be able to provide you with helpful information.
  9. The Administrator informs you of the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection, if you consider that our processing of your personal data violates applicable regulations.
  10. The Administrator secures all data in its possession against unauthorized access by third parties. In relation to computer files, the Administrator uses login protection methods, access levels and passwords, and encryption. Only authorized persons have access to documentation containing personal data. to the extent necessary.
  11. Your personal data will not be used for automated decision-making, including profiling.

1B. Information clause – registration for events organized by Safesqr

In accordance with Article 13 (1) and (2) of the General Data Protection Regulation of April 27, 2016. (GPDR) we inform you that:

  1. The administrator of your personal data is Safesqr sp. z o. o . with its registered office in Katowice, Kościuszki 61 St., 40 – 047 Katowice, NIP: 634-29-53-574, REGON: 382775067, Share capital: PLN 200,000.
  2. The IOD can be contacted via email at biuro@safesqr.com.
  3. Your personal data will be processed for the purpose of proper registration and participation in events organized by Safesqr sp. z o. o . – on the basis of Article 6(1)(b) GDPR.
  4. Your data will be processed for the period of registration and participation in the event, and after its completion only to the extent necessary to service the event. To the same extent, your data will be processed for periods resulting from generally applicable laws, including accounting and tax regulations.
  5. The Administrator reserves the right to process your personal data collected in connection with the use of our services for a longer period than indicated in point 4, based on the provision of Article 6(1)(f) of the GPDR, in order to pursue its legitimate interests of asserting claims against you and third parties in connection with the use of the Service, as well as registration and participation in events organized by the Administrator, or to protect you against such claims, until such claims expire or are time-barred.
  6. If you leave marketing consent, your data will be processed on the basis of the consent you have given – i.e. on the basis of Article 6(1)(a) of the GDPR.
  7. To the extent covered by your consent, your data will be processed until you withdraw your consent. Your personal data will be processed in order to provide you with information on products, services, trainings, workshops and other marketing activities in the field of IT security and computer forensics offered by the Administrator.
  8. Providing data is voluntary but necessary to receive marketing information.
  9. Your data is processed by service providers acting on behalf of the Administrator, such as the hosting of the website where the consent form is located or email. Some of our providers are based outside the European Union, but all are required to use standards that comply with the requirements of the GDPR. Our infrastructure is secured in accordance with best practices, and the website and web forms have SSL certificates.
  10. The Administrator provides you with the right of access to the content of your personal data, as well as the right to rectify, erase, restrict processing, the right to data portability, the right to object to processing, the right to withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal – under the terms of the law.
  11. You have the right to withdraw the consent you have given for the processing of personal data at any time, which does not affect the correctness of their processing by the Administrator until the consent is withdrawn.
  12. The Administrator informs you of the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection, if you consider that the processing of your personal data by us violates applicable regulations.
  13. The Administrator secures all data in its possession against unauthorized access by third parties. In relation to computer files, the Administrator uses login protection methods, access levels and passwords, and encryption. Only authorized persons have access to documentation containing personal data to the extent necessary.
  14. Your personal data will not be used for automated decision-making, including profiling.

1C. Information clause – marketing activities of Safesqr

In accordance with Articles 13(1) and (2) and 14(1) and (2) of the General Data Protection Regulation of April 27, 2016. (GPDR), we inform you that:

 

  1. The administrator of your personal data is Safesqr sp. z o. o . headquartered in Katowice, 61 Piotrowicka St., 40 – 723 Katowice, NIP: 634-29-53-574, REGON: 382775067, Share capital: PLN 200,000.
  2. The IOD can be contacted via email at biuro@safesqr.com.
  3. Your personal data have been obtained by Safesqr sp. z o. o. through their transfer directly by you, or by means other than from the data subject (we have provided detailed information in this regard in the email).
  4. In the case of marketing consent, your personal data will be processed on the basis of the consent you have given – i.e. on the basis of Article 6(1)(a) GPDR, for purposes related to marketing activities for the Administrator’s own products and services and those of Safesqr sp. z o.o.’s business partners.
  5. In the case referred to in point 4, your personal data will be processed until you effectively withdraw your consent.
  6. In the case referred to in point 5, your personal data will be processed for the duration of the Administrator’s marketing campaign, but for no longer than 3 months, or until you effectively lodge an objection.
  7. Notwithstanding the provisions of points 7 and 8, the Administrator reserves the right to process your personal data, for periods longer than those indicated above, on the basis of Article 6(1)(f) of the GPDR, in order to pursue its legitimate interests related to the need to assert claims or protect against such claims, which arose in connection with the Administrator’s marketing activities, until they expire or are time-barred.
  8. Your data is processed by service providers acting for the Administrator, such as email. Some of our suppliers are based outside the European Union, but all are required to use standards that comply with the requirements of the GPDR. Our infrastructure is secured in accordance with best practices.
  9. The Administrator provides you with the right of access to the content of your personal data, as well as the right to rectify, delete, limit processing, the right to data portability, the right to object to processing, the right to withdraw consent at any time, without affecting the legality of processing carried out on the basis of consent before its withdrawal – under the terms of the law.
  10. The Administrator informs you of the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection, if you consider that our processing of your personal data violates applicable regulations.
  11. The Administrator secures all data in its possession against unauthorized access by third parties. In relation to computer files, the Administrator uses login protection methods, access levels and passwords, and encryption. Only authorized persons have access to documentation containing personal data to the extent necessary.
  12. Your personal data will not be used for automated decision-making, including profiling.

1D. Information clause – personal data provided by the Administrator’s contractors

In accordance with Article 14 (1) and (2) of the General Data Protection Regulation of April 27, 2016. (GPDR) we inform you that:

  1. The administrator of your personal data is Safesqr sp. z o. o . based in Katowice, Kościuszki 61 St., 40 – 047 Katowice, NIP: 634-29-53-574, REGON: 382775067, Share capital: PLN 200,000. The administrator can be contacted by email at biuro@safesqr.com
  2. The IOD can be contacted via email at: biuro@safesqr.com
  3. Your personal data has been provided to Safesqr sp. z o. o. by the Administrator’s relevant contractor with whom you have an employment or civil law relationship, in connection with the conclusion or performance of an agreement entered into between Safesqr sp. z o.o. and that contractor.
  4. The aforementioned data will be processed in order to realize the legitimate interests of the Administrator, related to the process of conclusion, execution and monitoring of the performance of the agreement between the Administrator and the relevant contractor, i.e. on the basis of Article 6(1)(f) GPDR, with regard to personal data of persons representing the contractor, its employees, associates and other persons whose personal data have been or will be provided to the Administrator by the contractor for the aforementioned purposes.
  5. Your personal data will be processed for the duration of the contract concluded between the Administrator and the relevant contractor, and after its termination for the period required by generally applicable regulations.
  6. Notwithstanding the provisions of Section 5, the Administrator reserves the right to process your personal data, pursuant to Article 6(1)(f) of the GPDR, in order to pursue its legitimate interests related to the need to assert claims or protect against such claims that have arisen in connection with the conclusion or performance of the contract entered into between the Administrator and the relevant contractor, until they expire or become time-barred.
  7. The Administrator will process the following categories of your personal data: name, email address, employing company, position, telephone number (if applicable).
  8. Your data is processed by service providers acting for the Administrator, such as email. Some of our providers are based outside the European Union, but all are required to apply standards that comply with the requirements of the GPDR. Our infrastructure is secured in accordance with best practices.
  9. The Administrator allows you the right of access to the content of your personal data, as well as the right to rectification, erasure, restriction of processing, the right to data portability, the right to object to processing – under the terms of the law.
  10. The Administrator informs you of the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection, if you consider that the processing of your personal data by us violates applicable regulations.
  11. The Administrator secures all data in its possession from unauthorized access by third parties. In relation to computer files, the Administrator uses methods to protect logins, access levels and passwords, and encryption. Only authorized persons have access to records containing personal data to the extent necessary.
  12. Your personal data will not be used for automated decision-making, including profiling.

Collecting user data

The Administrator hereby informs the User that it uses the following technologies for statistical, marketing and UX purposes that track the User’s activities on the Site:

  • Facebook Pixel – in order to manage Facebook ads, check user actions between the landing page and the company’s Facebook company profile, and conduct remarketing activities.
  • Google Analytics tracking code – to analyze site statistics, content readability and collect anonymized data on users visiting the site.
  • Google Ads code – in order to implement, as well as optimize online advertising activities.
  • Google LLC – YouTube files are embedded within the site, which contain embedded Google LLC code that counts user interactions with the embedded content.
  • Hotjar code – in order to improve the performance of the site including better matching of the searched content to the user’s preferences.
  • The processing of the aforementioned data is carried out on the basis of the provision of Article 6(1)(f) GPDR, in order to realize the legitimate interest of the Administrator, i.e. for statistical, marketing and UX purposes.
  • The data collected in this way will be stored for a maximum period of 5 years.

Cookies

  • The administrator automatically collects information contained in cookies. Cookies are text files that are stored on the website user’s terminal device. They are intended for the use of the site. First of all, they contain the name of the website/subpage, its unique number, the time of storage on the end device.
  • The Administrator stores cookies on the User’s terminal device and then accesses the information contained therein for statistical purposes, for marketing purposes (remarketing) and to ensure proper operation of the site.
  • The Administrator hereby informs the User that most browsers are set by default to accept the storage of cookies on the end device. However, it is possible to configure the browser in such a way that it prevents cookies from being stored on the User’s terminal device. Failure to make modifications in this regard is tantamount to acceptance of the cookie collection rules used by the Administrator on this website (Page with currently available Google Analytics blocking tools (https://tools.google.com/dlpage/gaoptout/). If cookies are blocked, the User’s use of the Site may be impaired.
  • The Administrator hereby indicates that cookies can be deleted by the User, in order to do so, the User should enter the browser settings and clear the browsing data including cookies.
  • The processing of data collected with the use of cookies referred to above takes place in connection with the granting of consent, based on the provision of Article 6(1)(a) of the GPDR. The consent granted by the User may be withdrawn at any time, with the proviso that this will not affect processing occurring prior to its withdrawal.
  • The data collected in this way will be stored for a maximum period of 5 years.

Server logs

  • Please be informed that the use of the www.safesqr.com website involves sending queries to the server where the website is stored.
  • Each query directed to the server is recorded in the server logs. The logs include, among others, the User’s IP address, the date and time of the server, information about the Internet browser and the operating system used by the User.
  • Logs are saved and stored on the server.
  • The data stored in the server logs are not associated with specific individuals using the Site and are not used by the Administrator to identify the User.
  • The server logs are only auxiliary material used to administer the Site, and their contents are not disclosed to anyone except those authorized to administer the server.
  • The processing of the aforementioned data is carried out with regard to the log data on the basis of the provision of Article 6(1)(f) GPDR, i.e. for the purpose of realizing the Administrator’s legitimate interest, which includes administering the Site and conducting statistics.
  • The collected logs are stored for a maximum period of 5 years.