This Privacy Policy explains how we handle your data when you visit www.fin-csirt.rs or affiliated pages (the “Site”), or use the services we provide (the “Services”).
FIN-CSIRT respects the privacy of visitors to the Site and protects their personal data. Please read this Privacy Policy to understand how we use and protect the information you provide.
Purpose of the Privacy Policy
This Privacy Policy explains how we handle information collected from you or obtained about you from a third party, and why we process your personal data. It also sets out your rights in relation to that processing.
Information we collect from you
In principle, you can visit this website without disclosing any information about yourself. Our server records domain names, not email addresses, of visitors to the website. On certain parts of this website, we ask for personal information about you in order to allow you to exercise certain rights, such as providing certain information you request. We do this through the use of online forms and whenever you send us your details via email. The information we collect from you may include your name and email address. We will never ask you for additional information that is not necessary for you to receive the service you requested.
This Privacy Policy describes the types of personal data we process and how you can request deletion, correction, transfer or access.
Who we are and what we do
FIN-CSIRT is a company registered in Serbia with the task of providing expert assistance to businesses facing IT security issues and monitoring the internet traffic of client companies to prevent attacks on their information systems.
How to contact us
If you have any questions about this Privacy Policy or wish to exercise your rights as outlined in this Privacy Policy, please email info@fin-csirt.rs.
Personal data we collect
The information we collect from you may include your name and email address. We will never ask you for additional information that is not necessary for you to receive the service you requested. Our primary purpose in collecting your personal data is to improve, develop and launch new Services, and to fulfil requests you make through the Site or in connection with our Services.
How we use your personal data
We may use your data exclusively for the following purpose:
- Providing services
We collect and maintain personal data that you voluntarily provide during your use of the Site to allow us to perform the Services. If we ask for other personal information, such as your name and email address, we will seek your consent (e.g., through an online form or via email), inform you about the information collection process, and explain how we will use it. The information you provide or that we obtain through this website will be used solely to respond to your questions and/or to provide and improve our services. If you change your mind and no longer wish to be contacted in the future, please inform us.
Other websites
Our website may contain links to other websites that are not under our control and are not subject to this Privacy Policy. If you access other websites using the provided links, the operators of these websites may request information from you, which they will use according to their privacy policies, which may differ from ours.
Legal basis for using or processing your personal data
It is necessary for us to use your personal information in our legitimate interest in a manner that allows us to provide you with the Services in the best possible way.
Information in an incident report
When you submit an incident report through the form, you provide your full name, email address and a description of the incident, together with any files you choose to attach. We use an external electronic communications service to deliver reports to our team. The information you enter in the form and any attached files are transferred through that service.
The form uses Google reCAPTCHA to check the request before submission. Do not include passwords, PINs or one-time verification codes in the description or attachments.
Data storage and disclosure
We are committed to maintaining the security of the personal information you provide to us and have implemented appropriate information security policies, rules, and technical measures to protect the personal information under our control from unauthorised access, improper use or disclosure, unauthorised modification, and unlawful destruction or accidental loss.
The information you provide may be accessed by our associates, government authorities, our legal successors, and individuals we engage to process data on our behalf for the purposes outlined in this policy or other purposes for which you have granted permission.
Unless required by law, we will not make your information available or distribute it without your prior consent.
Use of cookies and similar technologies
Like most websites, our Site uses so-called “cookies” (hereinafter referred to as Cookies). Cookies are small text files that your Internet browser (hereinafter referred to as the browser) stores on your computer and help identify you on websites during subsequent visits. Cookies are uniquely assigned to you and can only be read by the web server in the domain that issued the cookie. The use of Cookies is a standard practice on the Internet, and most browsers are set to automatically accept all Cookies.
You can change your analytics preference using the “Cookie settings” button in the footer. Declining analytics stops further analytics data collection and removes the analytics cookies that this site can delete. You can remove other cookies through your browser settings. You can easily delete them manually or adjust your browser settings specifically for handling Cookies. For these procedures, consult the documentation or Help section of your browser. On our site, we use Cookies solely to provide a better quality of interaction with the site, as well as for statistical analysis of visits and optimisation of our online advertising.
How long do we keep your personal information?
We retain relevant personal data of site visitors for at least three years from the date of our last interaction with you, and in accordance with our obligations under the EU General Data Protection Regulation or similar laws worldwide, or longer if we are required to do so under our regulatory or professional obligations. In cases where you request it, if possible and legally justified, we will delete your data earlier.
Your rights regarding the personal data we hold about you are as follows:
- Right of access
If you send us a request, we will inform you whether we process your personal data, and if such a request exists, we will provide you with a copy of that personal data (along with certain other details) within a reasonable time frame. If you need additional copies, we may charge a reasonable fee.
- Right to rectification
If the personal information we hold about you is inaccurate or incomplete, you have the right to request correction.
- Right to deletion
You may request that we delete or remove your personal data, or if you withdraw your consent (where applicable).
- Right to restrict processing
You may request that we stop processing your personal data if you oppose such processing.
- Right to data portability
In certain circumstances, you have the right to request that we provide you with the personal information you have given us (in a structured, commonly used, and machine-readable format) and that we transfer it to another location or third party of your choice.
- Right to object
You may request that we stop processing your personal data, and we will do so if we rely on our legitimate interests for processing your personal data, unless we can show a compelling legal basis for processing; or we process your personal data for direct marketing purposes.
- Right to withdraw consent
If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time.
- Right to lodge a complaint with a supervisory authority
If you are concerned about any aspect of our privacy practices, including how we handle your personal data, you can report it to the relevant supervisory authority.
Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Any changes become effective on the day they are published on this page of the website.
We do not send notifications about changes. By using this site, you consent to all the provisions of this Privacy Policy and the Terms of Use of the site and its content.
Final provisions
Please read this Privacy Policy when accessing the Site to check for any changes.
If you continue to use the site after the publication of changes to our Privacy Policy, we will consider that you are aware of and fully accept those changes.