Privacy policy

Introduction

CyberCenter SRL is committed to protecting the privacy and personal data of our customers and visitors to our website.
This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and other applicable data protection laws.

By using our website or services, you agree to this Privacy Policy.

Who we are

CyberCenter SRL offers cybersecurity services, including but not limited to:

• Security audits and penetration testing
• Malware analysis and digital investigations (forensics)
• Incident response and compromise assessment
• Security awareness training and phishing simulations
• Vulnerability scanning and security solution implementation

The information we collect

We may collect the following categories of information:

a. Personal information:

• Name, company name, position/title
• Email address, phone number
• Billing and payment details (for contractual purposes)

b. Technical information:

• IP address, browser type, operating system
• Access logs, date and time of visits
• Information related to the use of our website and online services

c. Content submitted for analysis:

• Files, URLs, emails, or samples voluntarily submitted for malware analysis or threat detection.

This data may contain metadata or digital identifiers. We process this information solely for security assessment purposes and do not use it for profiling or marketing activities.

How we use personal data

We process your data for the following purposes:

• To provide and manage the requested cybersecurity services.
• To communicate with you regarding requests, reports, or incidents.
• To improve and secure our website and the services we offer.
• To comply with legal obligations and contractual requirements.
• To send relevant updates or security notifications (only if you have given your explicit consent).

We do not sell, rent, or distribute personal data to third parties.

Legal basis for processing

Data processing is based on the following legal grounds:

• Contractual necessity – for the provision of services to customers.
• Legitimate interest – to improve security and prevent fraud.
• Legal obligation – to comply with applicable laws.
• Consent – when you voluntarily submit data or subscribe to communications.

Data retention

We retain personal data only for as long as necessary for the purposes mentioned above, unless a longer period is required by law or contractual obligations.
Files sent for analysis are securely deleted within 7 days of completion of the analysis, unless otherwise agreed with the customer.

Data security

We implement advanced technical and organizational measures to protect personal data, including:

• Encryption of data in transit and at rest
• Multi-factor authentication and strict access controls
• Network segmentation and continuous monitoring
• Regular security audits and staff training

Although we make every effort to ensure data protection, no system can be completely secure; however, we strive to maintain the highest security standards in the industry.

Your rights

Under the GDPR, you have the right to:

• Access your personal data.
• Request that it be corrected or deleted.
• Restrict or object to its processing.
• Request data portability.
• Withdraw your consent at any time.
• Lodge a complaint with a Data Protection Authority.

To exercise these rights, please contact us.

Cookies and tracking technologies

Our website uses cookies to improve the user experience and analyze web traffic.
You can manage or disable cookies at any time through your browser settings or the Cookie Policy page.