Privacy Policy

Data Controller: EO SECURITY s.r.o., registered office at Trnitá 500/9, Trnitá, 602 00 Brno, Czech Republic, ID: 05182662, registered in the Commercial Register maintained by the Regional Court in Brno under file No. C 93979 (hereinafter „EO SECURITY").

E-mail: [email protected]

EO SECURITY processes personal data as a data controller. This document explains how your personal data will be processed in connection with the provision of penetration testing and cyber security services, the purposes of processing, retention periods and your rights.

Processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the „GDPR").

What personal data we process

EO SECURITY processes personal data in the following situations:

When you contact us via the website https://security-testing.cz or by other contact means: identification data, identification of the company you represent, e-mail, phone, the company you write from, and the information you leave in your message.

When you order services (penetration testing, security audit, NIS2 compliance, Red Team operations, etc.): personal data necessary for entering into and performing the contractual relationship — identification data, contact details, billing information and other data necessary for service delivery.

Information about activity on the EO SECURITY website. We use cookies for traffic analysis. More information is available in the cookie banner.

Purpose and legal basis of processing

Personal data obtained from e-mail and during service provision are processed by EO SECURITY for the purpose of service delivery and performance of contractual obligations (Article 6(1)(b) GDPR). Data are also processed for compliance with legal obligations (accounting, VAT — Article 6(1)(c) GDPR) and on the basis of legitimate interest in protecting legal claims.

Cookie data is used by EO SECURITY for analysis of website functionality and marketing activities. The legal basis is your consent or legitimate interest.

Confidentiality during service delivery

When providing penetration testing services, EO SECURITY works with confidential information about the client's infrastructure, applications and processes. All information obtained during testing is strictly confidential and subject to contractual confidentiality (NDA). Findings and reports are delivered exclusively to the client and not shared with third parties.

Who has access to your data

Access to personal data is granted exclusively to:

  • employees and collaborators of EO SECURITY bound by confidentiality;
  • processors providing IT and accounting services (under data processing agreements).

Personal data is processed within the European Union or in countries with an adequate level of personal data protection.

Retention period

We retain personal data only for as long as necessary to fulfil the processing purpose — typically for the duration of the contractual relationship and subsequently for the period required by law (e.g. 10 years for accounting records).

Your rights

In relation to the processing of your personal data, you have the following rights:

  • right of access to personal data;
  • right to rectification;
  • right to erasure („right to be forgotten");
  • right to restriction of processing;
  • right to object to processing;
  • right to data portability;
  • right to lodge a complaint with the Office for Personal Data Protection.

Contact for exercising your rights: [email protected]

EO SECURITY's activity is also supervised by the Office for Personal Data Protection, which you may contact with a complaint. More information at https://uoou.gov.cz.

Changes to the privacy policy

This policy is effective as of 1 January 2026.