Skip to content
HelleboreSecurity

Privacy

Privacy notice

We take the protection of personal data as seriously as the security of our clients' systems. This notice explains what we collect through this website and why.

Draft notice. The full text should be reviewed by a qualified privacy professional before launch.

Data controller

The data controller is Hellebore Security, Rome, Italy, P.IVA 17033831003. You can contact us about privacy matters at marreni@helleboresecurity.com or by phone on +1 202 960 6366.

What we collect

When you use our contact form or email us, we process the information you provide: your name, work email address, organisation (optional), area of interest and the content of your message.

This website does not use cookies for advertising, analytics or tracking. Our hosting provider processes technical data such as IP addresses in server logs for security and operational purposes.

Why we process it, and on what legal basis

We use your details to respond to your enquiry and to take steps you request before entering into a contract (Art. 6(1)(b) GDPR), and on the basis of our legitimate interest in managing business communications and securing our website (Art. 6(1)(f) GDPR).

How long we keep it

Enquiries that do not lead to an engagement are deleted within 6 months of our last exchange with you. This applies both to our mailbox and to the copies held in our form provider's submission archive. Where an engagement follows, data is retained as required by the contract and applicable Italian law.

Server logs kept by our hosting provider are retained only for as long as needed for security and operational purposes.

Who we share it with

We do not sell personal data. We use the following service providers (processors), each acting on our instructions under a data processing agreement:

Personal data collected through this website is stored and processed within the European Economic Area. We do not transfer it to countries outside the EEA.

Your rights

Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, and to data portability. To exercise these rights, contact us using the details above.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or the authority in your EU country of residence.

Last updated: 15 October 2026