Privacy
This notice explains what data the site uses, why and how long it keeps it, under Art. 13 of the GDPR. In short: the form data is used to send your result, and marketing and contact from AirVault are optional, with separate boxes.
Who is the controller?
The controller is Dezideriu Florian Pana, a private person. Contact for personal data: privacy@auditcybersecurity.ro.
What data do we use, why and on what basis?
| Purpose | Data | Basis | How long |
|---|---|---|---|
| Sending the result you asked for | Name, email, company, role and phone if given, the result | GDPR Art. 6(1)(b) | Until sent, and while the 30-day link is valid |
| Keeping the contact and result | The same data, date of the last result | GDPR Art. 6(1)(f), legitimate interest: following tool use and answering questions. You can object at any time. | 12 months after the last result |
| NIS2 updates by email | Name, email, sector from the check | Consent, GDPR Art. 6(1)(a) and Law 506/2004 Art. 12, with double opt-in | Until you unsubscribe, then deleted within 30 days |
| Contact from AirVault | Name, company, contact details, overall score. Not individual answers. | Consent | Until withdrawn; AirVault is a separate controller and gives you its own notice |
| Deadline reminders | Email, the deadline dates from the calendar | Consent, separate box | Until stopped or the deadlines have passed |
| Proof of consent | Date and time, exact text and version, IP address, browser, page language, confirmation | GDPR Art. 6(1)(c) and (f) | 3 years after the consent ends |
| Protection against abuse | IP address, briefly, to limit requests | GDPR Art. 6(1)(f) | Not stored in the contact database |
| Anonymous statistics | Aggregate scores, from at least 50 results, with no identifying data | GDPR Art. 6(1)(f) | No limit, this is not personal data |
Giving contact details is necessary to use the calculators, so the result can be sent to you. Articles and guides stay open with no form. Marketing and contact from AirVault are never a condition.
What happens to the self-assessment answers?
Individual answers stay in your browser. Only the area scores, overall score, the four backup answers and the class you chose reach the server. We treat them as confidential: they sit only in the database, not in static files, and the result email holds no weaknesses, only a signed link.
Who receives the data?
- Cloudflare (hosting, database in the European Union, cookieless Web Analytics, Turnstile if it becomes necessary). Transfers are covered by the EU standard contractual clauses and the EU-US Data Privacy Framework.
- Brevo (sending emails and the updates list).
- cyberfolks (the mailbox).
- AirVault (airvault.ro), only if you ticked that box.
Which cookies does the site use?
No tracking cookies, so there is no cookie banner. The only browser storage is a local entry that remembers for 30 days that you unlocked the calculators. It is strictly necessary for the service you asked for, and you can clear it with the "Forget my details on this browser" link.
What are your rights?
You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time, without affecting earlier processing. Write to privacy@auditcybersecurity.ro; we reply within one month. Every marketing email has an unsubscribe link.
You can complain to the Romanian supervisory authority (ANSPDCP, dataprotection.ro).
Updated: 5 November 2026 · Legal texts last checked: 5 November 2026 · Information, not legal advice; check the official text.