Privacy Policy

1. Controller

The controller of your personal data is Cyber Security Consulting s.r.o., Dělnická 213/12, 170 00 Praha 7, Company ID 07423021, VAT ID CZ07423021, registered in the Commercial Register kept by the Municipal Court in Prague, file no. C 300795. We have not appointed a data protection officer. You can reach us through the channels listed in section 8.

2. What data we process

Contact form: your name, company, email address and the content of your message.

Meeting booking (Cal.com): your name, email address, the time slot you choose and any notes you add.

Technical data: when you visit the site, our hosting and CDN providers record your IP address, browser type and the pages requested in server and security logs. We do not use analytics or advertising trackers.

3. Purpose and legal basis

Responding to your enquiry and preparing an offer: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).

Keeping records of business contacts in our CRM and following up on your enquiry: Art. 6(1)(f) GDPR (our legitimate interest in maintaining business relationships).

Securing the website and preventing abuse: Art. 6(1)(f) GDPR (our legitimate interest in the security of our systems).

Providing your data is voluntary. However, without your name, email address and company we cannot handle your enquiry.

We do not send marketing communications without your consent and we do not make automated decisions about you.

4. Recipients and processors

We share personal data only with providers who process it on our behalf under data processing agreements:

• HubSpot — CRM — storing and managing contact enquiries (EU data centre)
• Resend — delivery of email notifications about form submissions
• Cal.com — meeting scheduling
• Cloudflare — CDN, DDoS protection and web application firewall
• Hetzner Online — hosting of the website (data centres in the EU)

Resend and Cloudflare may process data in the United States. Such transfers are covered by the EU–US Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission. We do not sell personal data.

5. Retention

Enquiries and related correspondence: up to 3 years after our last contact. If a contract is concluded, data is kept for the duration of the contract and the statutory retention periods that follow.

Server and security logs: for a limited period defined by the respective provider, after which they are deleted or anonymised.

6. Cookies

This website does not use analytics, advertising or tracking cookies.

The site may set a technical cookie (NEXT_LOCALE) to remember your language choice, and our CDN provider Cloudflare may set strictly necessary security cookies (such as __cf_bm) to distinguish people from automated traffic. These cookies do not require consent.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data rectified
• have your data erased
• restrict processing
• receive your data in a portable format
• object to processing based on our legitimate interest
• lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz)

To exercise your rights, contact us using the channels below. We respond within one month.

8. Contact

You can contact us via the contact form, by booking a call, or by post at Cyber Security Consulting s.r.o., Dělnická 213/12, 170 00 Praha 7.