Privacy
Privacy notice
We take the protection of personal data as seriously as the security of our clients' systems. This notice explains what we collect through this website and why.
Draft notice. The full text should be reviewed by a qualified privacy professional before launch.
Data controller
What we collect
When you use our contact form or email us, we process the information you provide: your name, work email address, organisation (optional), area of interest and the content of your message.
This website does not use cookies for advertising, analytics or tracking. Our hosting provider processes technical data such as IP addresses in server logs for security and operational purposes.
Why we process it, and on what legal basis
We use your details to respond to your enquiry and to take steps you request before entering into a contract (Art. 6(1)(b) GDPR), and on the basis of our legitimate interest in managing business communications and securing our website (Art. 6(1)(f) GDPR).
How long we keep it
Enquiries that do not lead to an engagement are deleted within 6 months of our last exchange with you. This applies both to our mailbox and to the copies held in our form provider's submission archive. Where an engagement follows, data is retained as required by the contract and applicable Italian law.
Server logs kept by our hosting provider are retained only for as long as needed for security and operational purposes.
Who we share it with
We do not sell personal data. We use the following service providers (processors), each acting on our instructions under a data processing agreement:
- Form.taxi, Germany (data centre in Dresden): receives contact form submissions and forwards them to our mailbox (info@helleboresecurity.com). Privacy policy.
- Scaleway SAS, France (Paris region): hosts this website. Privacy policy.
Personal data collected through this website is stored and processed within the European Economic Area. We do not transfer it to countries outside the EEA.
Your rights
Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, and to data portability. To exercise these rights, contact us using the details above.
Last updated: 15 October 2026