PRIVACY PROTOCOL

/// 01. OPERATOR

/// 02. DATA PROTECTION OFFICER (DPO)

Data protection oversight is performed by: Victor Aliquis

/// 03. PURPOSE OF PROCESSING

We process your data exclusively for these purposes:

• Processing and investigation of reported cases.
• Communication and feedback on inquiries.
• Fulfillment of legal obligations.

/// 04. LEGAL BASIS FOR PROCESSING

Each purpose has its own legal basis under Article 6 GDPR:

• Performance of a contract — handling the commissioned case and communicating with the client.
• Compliance with a legal obligation — accounting and tax records.
• Legitimate interest — operating and securing the website, preventing abuse, and establishing or defending legal claims.
• Consent — optional analytics cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.

/// 05. THIRD-PARTY DATA IN CASE FILES

Published case files may contain personal data of people who are not our clients — for example, participants in the investigated event. For every file we assess which data are necessary to understand the case; the rest does not belong in the published version.

Files marked as classified open only after the code is entered. Evidence attachments of such a file are never served from a direct address — only the server releases them, after verifying the code.

/// 06. RETENTION PERIOD

We keep data only for as long as the purpose requires:

• Case material and evidence attachments — for as long as the purpose for which the file was kept or published lasts; afterwards they are deleted or anonymised.
• Inquiries and correspondence — until the inquiry is handled, and then for as long as needed to establish or defend legal claims.
• Accounting and tax records — for the period required by law.
• Cookies — for the period stated for each cookie in the cookie list.

The exact period differs from file to file depending on the nature of the case; we will tell you on request.

/// 07. RECIPIENTS AND DATA STORAGE

We do not pass data to third parties for their own purposes and we do not sell it.

The website, the database and case attachments run at a cloud service provider that acts as our processor and is bound by a data processing agreement. Files are kept in object storage; attachments of classified files sit in a separate area that is not publicly reachable.

Where operations involve processing outside the European Economic Area, it is covered by the European Commission’s Standard Contractual Clauses.

We may hand data to public authorities where the law requires it.

/// 08. DATA SECURITY

We use modern encryption and security protocols.

/// 09. YOUR RIGHTS

Under the GDPR you have the following rights towards us:

• the right of access and to a copy of the data processed,
• the right to rectification of inaccurate or incomplete data,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability,
• the right to object to processing based on legitimate interest,
• the right to withdraw consent at any time.

Send your request to the contact above. We will handle it within one month of receipt at the latest. [email protected]

/// 10. SUPERVISORY AUTHORITY

If you believe our processing infringes the GDPR, you may lodge a complaint with the supervisory authority:

You may also complain to the supervisory authority of the country where you habitually reside or where the alleged infringement took place.