Privacy Policy

The controller for the personal data described here is The Origami Corporation Ltd. Its contact details are listed under Operator below.

For anything about your personal data, write to contact@blackfox-security.com.

• Contact requests: the name, e-mail address and message you enter in the contact form, and optionally your phone number and company size. The form also sends the language of the page and how you arrived at the site (the campaign tags in the address, the referring site and the first page you opened), so we know where requests come from.
• E-mail: what you write to us and your address.
• Certificate checks: the certificate ID you enter on the verification page, used only to look it up.
• Technical data: like every web server, ours receives your IP address, browser details, the page requested and the time. It is used to deliver the page and keep the Service secure.
• Cookies and similar technologies, as described in the cookie policy.

We use personal data only for the purposes below, each on the legal basis named (Article 6(1) GDPR):

• Answering a contact request or an e-mail, and preparing a proposal: steps prior to a contract at your request (point b), or our legitimate interest in answering business enquiries (point f).
• Analytics and advertising measurement, where enabled: your consent (point a) in the cookie banner.
• Spam protection, error monitoring and keeping the Service secure: our legitimate interest in running a working, abuse-free site (point f).
• Keeping records we are required to keep, such as contracts and invoices: legal obligation (point c).

Where we rely on legitimate interest you can object at any time; where we rely on consent you can withdraw it at any time, without affecting what was done before.

The Service can use Google Analytics, Google Tag Manager and Microsoft Clarity to understand how visitors use it, and the LinkedIn Insight Tag to measure our LinkedIn campaigns. None of them is requested by your browser before you consent to its category in the cookie banner, and accepting analytics does not accept marketing.

Your choice is stored in your browser's local storage and applied on later visits. You can change it at any time with the Cookie settings button in the footer of every page.

If the contact form is protected by Google reCAPTCHA v3 (run by Google Ireland Limited), it loads only when you start filling in the form, never when you just read a page. It then sends Google information such as your IP address, browser and device details and how you interact with the page, so that it can tell people from bots. We rely on our legitimate interest in keeping the form free of abuse; the Google Privacy Policy and Terms of Service apply.

When a page throws an error in your browser, we can post a report to a Grafana Faro collector that we run ourselves. It sets no cookie, stores no identifier and does not follow you between pages or visits. The report contains the error message, its stack trace and the address of the page. We rely on our legitimate interest in keeping the Service working, so it is not part of the cookie banner choices.

We share personal data only with the service providers needed for the purposes above, under data processing terms where they act for us, and with authorities where the law requires it:

• The Origami Corporation group, which runs the hosting, the form service that delivers contact requests and the error collector.
• Google Ireland Limited: reCAPTCHA where enabled, and with your consent Google Analytics and Google Tag Manager.
• Microsoft Ireland Operations Limited: Microsoft Clarity, with your consent.
• LinkedIn Ireland Unlimited Company: the LinkedIn Insight Tag, with your consent.

If you are located outside Bulgaria and provide information to us, note that we transfer the data, including personal data, to Bulgaria and process it there.

Google, Microsoft and LinkedIn are part of groups based in the United States, so data they receive may be transferred to or accessed from the US. Where the recipient is certified under the EU-US Data Privacy Framework we rely on the European Commission's adequacy decision; otherwise on the European Commission's standard contractual clauses. Write to us for a copy of the relevant safeguards.

We keep personal data only as long as the purpose needs it. Contact requests and correspondence are kept while we handle them and for as long as a resulting business relationship needs them; contracts and invoices for the periods the law requires; analytics data as set by each provider and listed in the cookie policy; technical logs and error reports only as long as needed to operate and secure the Service.

We use appropriate technical and organisational measures to protect personal data. No method of transmission over the internet or of electronic storage is completely secure, so we cannot promise absolute security.

Under the GDPR you have the right to:

• Access your personal data
• Have inaccurate data corrected
• Have your data deleted
• Restrict processing
• Receive your data in a portable format
• Object to processing based on legitimate interest
• Withdraw consent at any time, without affecting earlier processing

To use any of these rights, write to contact@blackfox-security.com. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work or where an alleged infringement took place.

We do not use your data for automated decision-making or profiling with legal or similarly significant effects.

The Service does not address anyone under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and know that your child has provided us with personal data, contact us and we will remove it.

The Service may link to sites we do not operate. We have no control over and assume no responsibility for their content, privacy policies or practices; review the privacy policy of every site you visit.

We may update this policy from time to time. The date at the top shows when it last changed, and changes take effect when they are posted on this page.

Company

The Origami Corporation Ltd.

E-mail

contact@blackfox-security.com

Questions about this document go to contact@blackfox-security.com