1. Who we are

This website is operated by Protectwise ("we", "us", "our"), a cybersecurity advisory practice based in the European Union.

• Website: protectwise.eu
• Contact email: [email protected]

For the purposes of the General Data Protection Regulation (GDPR), the data controller is Protectwise, reachable at the email address above.

2. What data we collect

2.1 Data you provide voluntarily

We only collect personal data when you choose to contact us:

• Email correspondence: If you email us at [email protected], we receive your email address, name, and the content of your message.
• Scheduling a call: If you book a meeting through our Calendly link, Calendly collects the information you provide (name, email, meeting preferences). This is governed by Calendly's Privacy Policy.
• LinkedIn messages: If you contact us via LinkedIn, that interaction is governed by LinkedIn's Privacy Policy.

2.2 Data collected automatically

This website does not use analytics tools (e.g., Google Analytics), tracking pixels, or advertising cookies.

However, when you visit this website, the following occurs as a normal part of how the internet works:

• Web server logs: Our hosting provider may record standard server logs including your IP address, browser type, referring page, and timestamp. These logs are used solely for security monitoring and are not linked to your identity.
• Third-party CDN requests: This site loads fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com) and icons from unpkg.com. When your browser requests these resources, your IP address is transmitted to those services. See Google's Privacy Policy for details.

2.3 Local storage

We use your browser's localStorage (not cookies) to remember your visual theme preference. This data never leaves your device and is not transmitted to any server.

3. Cookies

This website does not set any first-party cookies. We do not use cookie-based analytics, advertising, or tracking of any kind.

Third-party services loaded by this site (Google Fonts) may set their own cookies. We have no control over these. You can block third-party cookies in your browser settings without affecting site functionality.

4. How we use your data

When you contact us, we use your information only to:

• Respond to your inquiry
• Discuss our services and whether we can help
• Schedule and conduct meetings

We do not:

• Sell, rent, or share your personal data with third parties for marketing
• Send unsolicited emails or newsletters
• Use your data for profiling or automated decision-making

5. Legal basis for processing

Under the GDPR, we process personal data on the following bases:

Activity	Legal basis
Responding to your email or inquiry	Legitimate interest (Art. 6(1)(f)) — responding to a contact request you initiated
Pre-contractual discussions about services	Necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Art. 6(1)(b))
Server logs for security monitoring	Legitimate interest (Art. 6(1)(f)) — protecting the website from abuse

6. Data retention

• Email correspondence: Retained for as long as necessary to complete the business relationship or inquiry, then deleted. If we enter into a service agreement, correspondence is retained for the duration of the engagement plus any legally required retention period.
• Server logs: Retained by our hosting provider per their retention policy, typically no longer than 90 days.
• localStorage: Remains on your device until you clear your browser data.

7. Data sharing

We do not share your personal data with third parties except:

• Hosting provider: Our website is hosted by a third-party provider that may process server logs on our behalf.
• Legal obligation: If required by law, regulation, or valid legal process.

We do not transfer personal data outside the European Economic Area (EEA) except where third-party services (Google Fonts, Calendly) process data in accordance with their own GDPR-compliant data processing agreements.

8. Your rights under GDPR

As an EU resident, you have the following rights regarding your personal data:

• Right of access — Request a copy of any personal data we hold about you
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your personal data
• Right to restrict processing — Request that we limit how we use your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interest

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Latvia, this is the Data State Inspectorate (Datu valsts inspekcija).

9. Security

We take appropriate technical and organizational measures to protect any personal data we process. As a cybersecurity practice, we apply the same standards to our own operations that we recommend to our clients.

10. Children

This website is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will not reduce your rights under this policy without your consent.

12. Contact

For any questions about this privacy policy or how we handle your data:

• Email: [email protected]