Privacy policy
1. Data Controller
The data controller is Defguard spółka z ograniczoną odpowiedzialnością, with its registered office in Szczecin, Poland, at ul. Cyfrowa 6/317, 71-441 Szczecin. For inquiries, contact office@defguard.net.
2. Personal Data We Collect
We collect the following categories of personal data:
- Contact information: Email address provided during the purchase process.
- Billing information: Necessary details for issuing invoices (name, address, tax identification number).
- Support inquiries: Information shared when contacting our support team.
- Cookies and website usage data: Collected through cookies and similar technologies for analytics and, with your consent, advertising (see section 4).
3. Purpose of Data Processing
We process your data to:
- Fulfill contractual obligations, including license delivery and support.
- Issue invoices and meet legal requirements.
- Improve our website and services using Google Analytics and Microsoft Clarity data, and measure our advertising, based on your consent.
4. Cookies and Analytics
If you visit from the European Economic Area (EEA), the United Kingdom or Switzerland, a cookie banner run by Cookiebot asks for your consent on your first visit. Until you make a choice, we only set the cookie that stores that choice. You can accept or reject each category:
- Necessary: remembers your consent choice. Always on.
- Statistics: Google Analytics and Microsoft Clarity, which show us how the website is used: pages visited, clicks and scrolling, device and browser type, approximate location and traffic sources. Microsoft Clarity also creates session replays and heatmaps of how visitors move through a page.
- Marketing: cookies that measure and personalize our advertising, such as Google Ads.
If you visit from anywhere else, we do not show the banner and these cookies are set by default. Wherever you are, you can change or withdraw your consent at any time with the Cookie settings link in the website footer.
If you accept Statistics, your browser also remembers, for the current tab only, the last button you clicked on our website. This tells us which page led you to a form you submit.
We load these tools through Google Tag Manager, which does not set cookies itself. The full list of cookies we use, kept up to date by an automatic scan, is in the Cookie Declaration at the end of this page.
Google Analytics and Microsoft Clarity may transfer data outside the EEA. We ensure compliance with GDPR through Google’s and Microsoft’s adherence to the EU-U.S. Data Privacy Framework.
5. Your Rights Under GDPR
You have the following rights:
- Access: Request access to your personal data and obtain a copy.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request data deletion where legally permissible.
- Restriction: Limit data processing in specific circumstances.
- Objection: Object to processing based on legitimate interests.
To exercise these rights, contact support@defguard.net.
6. Data Retention
- Billing data: Retained for 5 years (legal compliance).
- Support data: Retained for 2 years after the last interaction.
- Google Analytics data: Retained according to Google’s policies (currently up to 26 months).
- Microsoft Clarity data: Retained according to Microsoft’s policies.
- Cookie consent: Your choice is stored in your browser for up to 12 months, after which we ask again. Cookiebot keeps a record of it as proof of your consent.
7. Data Sharing
We do not sell personal data but share it as follows:
- With payment processors for transaction verification.
- With Google (Google Analytics, Google Tag Manager and, with your consent, Google Ads) and Microsoft (Microsoft Clarity) for website analytics and advertising.
- With Cookiebot, which runs our cookie banner and stores the record of your consent.
8. Security Measures
We implement technical and organizational measures to protect your data, including encryption and access controls.
9. Mobile application
The app may request access to the device’s camera to enable core functionality, such as scanning QR codes. No camera data is stored or transmitted.
10. Changes to Privacy Policy
Updates to this Privacy Policy will be posted here and take effect 24 hours after publication.
11. Governing Law
This Privacy Policy is governed by Polish law. Any disputes will be resolved in the courts of Szczecin, Poland.