Privacy policy

In force from 21 August 2026. Last updated: 21 August 2026.

1. Data controller

The data controller is Grzegorz Jaworek, operating the Anat Secure project. A company for the Anat Secure brand is being registered - once that is complete we will add full registration details here. For anything concerning data protection, write directly to verify@anatsecure.com.

2. What data we process

The free check form asks for a website address and an e-mail address. Providing them is voluntary, but without them we cannot run the check or send you the result.

If you go on to a paid service, the scope widens to the data needed to conclude and settle a contract (company details, contact details of people on your side, invoicing data). We collect those in correspondence, not through this form.

The hosting server keeps standard access logs (IP address, date and time of the request, requested page, browser type). These are technical data and we do not link them to the form.

3. Purpose and legal basis

Running the free check and sending the result - Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).
Replying to your questions - Article 6(1)(f) GDPR (legitimate interest: handling an enquiry).
Concluding and performing an audit contract - Article 6(1)(b) GDPR.
Tax and accounting obligations - Article 6(1)(c) GDPR.
Site security and pursuing claims - Article 6(1)(f) GDPR.

We do not use your data for marketing without separate consent, and we do not profile you automatically.

4. Who processes the data

cyber_Folks S.A. - hosting for the site and mail.
Web3Forms - technical delivery of the form. Form data passes through this service and arrives in our mailbox.

Each of these processes data only on our instructions and only as far as their service requires. We do not sell or share data with anyone else.

5. Data during an audit

This section is specific to our service. A security audit works on your software, so it is worth being clear about what we do not do.

We test on a test environment and do not need your clients' real data. If access to production data ever proves necessary, we agree it separately and in writing, and you remain its controller - we then act as a processor under a data processing agreement.

Audit results, including descriptions of the vulnerabilities we find, are treated as confidential. We do not publish them and do not use them as marketing material without your explicit consent.

6. Retention

Form enquiries that did not lead to work - 12 months from the last contact.
Audit documentation and client correspondence - for the term of the contract and 6 years afterwards (limitation periods and accounting obligations).
Certificate data shown in the verification lookup - for the validity period of the certificate and after it expires, so that seal verification remains possible. We agree the scope of that data with you before issuing the certificate.
Server logs - as per the hosting provider's policy.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, port it, and object to processing based on legitimate interest. Write to verify@anatsecure.com.

You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw).

8. Cookies and analytics

This site uses no cookies and no user-tracking analytics. We embed no advertising scripts. That is why there is no cookie consent banner here - there is nothing to consent to.

Typefaces are served from our own server rather than an external CDN, so visiting the site does not hand your IP address to a font provider.

9. Security

The site runs over HTTPS only. Access to the mailbox and to audit documentation is limited to the people delivering the work and protected by two-factor authentication. We apply data minimisation: we do not collect what we do not need to deliver the service.

10. Contact

Privacy questions, data requests, or doubts about a seal: verify@anatsecure.com.