Privacy Policy

2. Information We Collect

Personal Information

• Contact information (name, email address, phone number, company name)
• Account credentials and authentication data
• Billing and payment information
• Professional information (job title, responsibilities)
• Communication preferences

Technical Information

• IP addresses and device identifiers
• Browser type and version
• Operating system information
• Network traffic data (for security monitoring services)
• Security event logs and incident data
• System configuration information

Service-Related Information

• Security assessment results
• Vulnerability scan data
• Incident response information
• Compliance audit findings
• Service usage metrics

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our cybersecurity services
• Security Monitoring: To detect, prevent, and respond to security threats and incidents
• Account Management: To manage your account and provide customer support
• Communication: To send service updates, security alerts, and marketing communications (with consent)
• Compliance: To meet legal and regulatory requirements
• Analytics: To analyze service usage and improve our offerings
• Research: To conduct cybersecurity research and threat intelligence

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in service delivery (under strict confidentiality agreements)
• Legal Requirements: When required by law, court order, or government request
• Security Threats: To prevent fraud, security breaches, or protect rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: With your explicit consent for specific purposes

5. Data Security

As a cybersecurity company, we implement industry-leading security measures:

• 256-bit AES encryption for data at rest and in transit
• Multi-factor authentication for all systems
• 24/7 security monitoring and intrusion detection
• Regular security audits and penetration testing
• SOC 2 Type II and ISO 27001 certified facilities
• Zero-trust security architecture
• Incident response procedures aligned with NIST framework

6. Data Retention

We retain your information for as long as necessary to:

• Provide requested services
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain security audit trails (typically 7 years)

Security logs and incident data are retained according to industry standards and compliance requirements. Personal information is securely deleted when no longer needed.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your information (subject to legal requirements)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your information
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, please contact us at privacy@atlantika.io. We will respond within 30 days.

8. International Data Transfers

ATLANTIKA operates globally with facilities in the United States and Hungary. When we transfer personal information internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Additional security measures for cross-border transfers
• Compliance with GDPR requirements for EU data subjects

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the “Last Updated” date
• Sending email notifications for significant changes

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EU data subjects, you may also contact our Data Protection Officer at dpo@atlantika.io.