Privacy Policy

1. Introduction

At RovySec, protecting your privacy is at the core of our operations. This Privacy Policy details how we collect, use, and safeguard the personal information of our clients, website visitors, and partners in compliance with the General Data Protection Regulation (GDPR) and local applicable laws.

2. Information We Collect

We collect data necessary to provide our cybersecurity services, process requests, and improve user experience:

• Information provided by you: When you request a demo, download a whitepaper, or contact us, we collect your First Name, Last Name, Work Email, and any text you provide in the message fields.
• Automatically collected data: Technical data including IP addresses, browser types, and usage metrics on our website, collected via cookies to ensure the website functions correctly and to analyze traffic.

3. How We Use Your Data

We process your personal data under the following legal bases:

• Consent: Sending you marketing communications, whitepapers, or responding to your direct inquiries.
• Legitimate Interest: Maintaining our website's security, preventing fraud, and improving our AI-driven security tools.
• Contractual Necessity: Delivering penetration testing services and managing client relationships.

4. Data Sharing & Third Parties

RovySec does not sell your personal data. We may share necessary data with trusted third-party service providers (such as secure cloud hosting and CRM platforms) solely to operate our business. All third-party providers are subject to strict data processing agreements ensuring GDPR compliance.

5. Data Security & Retention

As a cybersecurity firm, we implement the highest technical and organizational measures (including encryption in transit and at rest) to protect your data against unauthorized access. We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations.

6. Your Data Protection Rights

Under the GDPR, you possess specific rights regarding your data:

• The right to access: Request copies of your personal data.
• The right to rectification: Request correction of inaccurate information.
• The right to erasure ("Right to be Forgotten"): Request that we erase your data under certain conditions.
• The right to restrict or object to processing: Limit how we use your data, specifically for marketing.