Privacy notice
What we collect through this website, why, how long we keep it, and what you can require us to do about it.
Cyberross OÜ, Ahtri tn 12, 10151 Tallinn, Estonia, is the controller for personal data processed through this website.
Data protection enquiries: info@cyberross.com
In short
We collect what a reply requires, keep it in the EU, and delete it on request. No advertising or analytics cookies are set anywhere on this site.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Name, work email, organisation, role | Responding to an assessment or contact request and preparing the engagement | Consent (Art. 6(1)(a)); pre-contractual steps (Art. 6(1)(b)) | 24 months from last contact, then deleted |
| Domain submitted for assessment | Performing the external assessment you requested | Consent (Art. 6(1)(a)) | 12 months, then deleted |
| IP address and submission timestamp | Rate limiting and abuse prevention on the form endpoint | Legitimate interests (Art. 6(1)(f)) — securing our own infrastructure | 30 days |
| Server access logs | Operating and securing the website | Legitimate interests (Art. 6(1)(f)) | Per hosting provider's standard period |
This website sets no advertising or analytics cookies and embeds no third-party trackers. Fonts are self-hosted, so no request is made to a third-party font provider when you load a page.
Under the GDPR you may request access to your personal data, its correction or erasure, restriction of processing, portability, and you may object to processing. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Write to info@cyberross.com. We respond within one month. If you are not satisfied, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the supervisory authority where you live.
Personal data submitted through this website is stored within the European Union. We do not transfer it outside the EEA for the purposes described above.
We use a small number of sub-processors for hosting and email delivery. The current list is available on request and forms part of our data processing agreement for contracted clients.
Last reviewed . See the trust centre for certifications, data residency and vulnerability disclosure.