Privacy Policy

  • Home
  • ›
  • Privacy Policy

Last updated: October 28, 2026

This Privacy Policy explains how Nyorsoft s.r.o. ("Nyorsoft", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit www.nyorsoft.com, contact us, request information, or use our services.

We are committed to handling personal data responsibly and transparently.

1. Who We Are

Nyorsoft s.r.o., Rudroffova 3, 831 06 Bratislava, Slovak Republic
Email: info@nyorsoft.com   Phone: +421 911 558 102

For the purposes of applicable data protection law, Nyorsoft may act as:

  • a data controller for personal data collected through our website, inquiries, business communications, and client administration; and
  • in some cases, a data processor or independent controller in relation to information handled during a client engagement, depending on the nature of the service and the relationship between the parties.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly

  • name
  • company name
  • job title
  • email address
  • phone number
  • website URL or domain
  • project or inquiry details
  • billing information
  • any information you include in messages, forms, or emails

Information collected automatically

When you visit our website, we may automatically collect certain technical data, such as:

  • IP address
  • browser type and version
  • device type
  • operating system
  • referring website
  • pages visited
  • date and time of access
  • general usage and interaction data

Information collected during service delivery

Depending on the scope of the engagement, we may collect or receive:

  • scope and authorization information
  • target domains or URLs
  • technical observations
  • communications related to the project
  • business contact details of your representatives

We do not intentionally request sensitive personal data through our website.

3. How We Use Personal Data

We may use personal data to:

  • respond to inquiries
  • provide quotes or proposals
  • communicate about requested services
  • verify business relationships and project scope
  • deliver services
  • issue invoices and manage payments
  • maintain business records
  • improve website functionality and security
  • protect our rights, systems, and business operations
  • comply with legal and regulatory obligations

4. Legal Bases for Processing

Where the GDPR applies, we rely on one or more of the following legal bases:

  • performance of a contract or taking steps before entering into a contract;
  • legitimate interests, such as responding to business inquiries, operating and securing our website, preventing misuse, improving our services, and managing business relationships;
  • legal obligations, where processing is required by law;
  • consent, where required, especially for certain cookies or similar technologies. The GDPR framework requires transparency around why personal data is processed and recognizes rights such as access, rectification, erasure, restriction, portability, objection, and rights relating to certain automated decision-making.

5. Cookies and Website Analytics

We use one strictly necessary cookie that remembers your cookie choice. We use no advertising cookies.

Only if you click Accept in the cookie banner, we use Microsoft Clarity to understand how visitors use our website (pages viewed, clicks, scrolling, where visitors leave), including session replays and heatmaps. Text typed into our forms is masked. We have instructed Clarity not to use this data for advertising. Microsoft processes this data as described in the Microsoft Privacy Statement. The legal basis is your consent, which you can withdraw at any time via "Cookie Settings" in the footer.

Some pages also load files from Spline (3D animations) and Cloudflare Turnstile (spam protection on the contact form); these providers receive your IP address when your browser fetches them. Our fonts are hosted on our own server.

Full details, including the list of cookies, are in our Cookie Policy.

Free website security check

When you use our free security check, we process the domain name you enter to read its public DNS records and the public response of its homepage. Results are cached on our server for 10 minutes. To prevent abuse we keep a counter of checks per visitor for up to one hour, identified only by a one-way hash of the IP address; we do not store the IP address itself. The legal basis is our legitimate interest in providing the tool and protecting it from misuse.

6. Contact Forms and Communications

If you contact us through a form, email, or phone, we may process your data to:

  • respond to your message
  • discuss your request
  • prepare a quote or proposal
  • maintain a record of the communication
  • follow up on a legitimate business inquiry

Please do not send passwords, highly sensitive credentials, or unnecessary confidential personal data through public contact forms.

7. Client Engagement Data

When you become a client, we may process personal data necessary to:

  • confirm the engagement
  • define and manage project scope
  • communicate with authorized representatives
  • deliver reports and recommendations
  • check the email address you provide at checkout against publicly known data breaches, as part of the purchased review
  • handle billing, administration, and recordkeeping

Depending on the engagement, Nyorsoft may process certain information under client instructions, or may independently determine how to process some data needed to manage the engagement. The controller/processor distinction depends on the actual roles of the parties, not only on labels used in a contract.

8. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including:

  • responding to inquiries
  • maintaining business records
  • providing services
  • complying with tax, accounting, and legal obligations
  • resolving disputes
  • enforcing agreements

Retention periods may vary depending on the type of data and the legal or operational reason for keeping it.

When data is no longer needed, we will delete it, anonymize it, or securely store it only where retention is legally required.

9. Who We Share Personal Data With

We may share personal data with:

  • hosting providers
  • email providers
  • website and IT service providers
  • Microsoft (Clarity website analytics), only if you consent to analytics
  • payment processors
  • Have I Been Pwned (haveibeenpwned.com), to which we submit only the email address you provide at checkout in order to check it against known data breaches; no other data is shared
  • accounting, legal, or professional advisers
  • subcontractors or contractors involved in service delivery under appropriate confidentiality obligations
  • public authorities, courts, regulators, or law enforcement where required by law

We do not sell personal data.

We do not share personal data with third parties for their own independent marketing purposes.

10. International Transfers

Because we may work with clients, tools, or service providers outside the European Economic Area, personal data may in some cases be transferred internationally.

Where required, we take steps intended to ensure an appropriate level of protection for transferred personal data, such as relying on contractual safeguards or other lawful transfer mechanisms.

11. Data Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no website, email transmission, or online service can be guaranteed to be completely secure. You should avoid sending unnecessary sensitive information through general web forms or unsecured channels.

12. Your Rights

Where the GDPR or other applicable data protection laws apply, you may have the right to:

  • request access to your personal data
  • request correction of inaccurate data
  • request deletion of personal data
  • request restriction of processing
  • object to certain processing
  • request data portability
  • withdraw consent where processing is based on consent
  • lodge a complaint with a competent supervisory authority

The European Commission's official guidance explains these rights for individuals under EU data protection law.

To exercise your rights, contact us at info@nyorsoft.com.

We may need to verify your identity before responding to certain requests.

13. Marketing Communications

If we send business-related updates or marketing communications, we will do so in accordance with applicable law.

You can opt out of non-essential marketing communications at any time by using the unsubscribe option where available or by contacting us directly.

Business outreach emails

We sometimes send a short business email to a company whose public DNS records or website show a specific, publicly visible security gap, for example a missing DMARC record. We send at most one follow-up, and none if the company replies or asks us to stop.

  • Data we use: the company's name, city and website, the business email address published on the company's own website, and, if that address belongs to a named person, that person's name.
  • Where it comes from: the company's own website and public business listings such as Google Maps. We do not buy contact lists.
  • What we check before writing: only public information, namely the domain's DNS records and the response any visitor's browser receives from the homepage, as in our free security check. We do not test or access anything else without the company's request.
  • Purpose and legal basis: to tell the company about the finding and introduce our services, based on our legitimate interest in business-to-business communication (Article 6(1)(f) GDPR). For recipients in the United States we follow the CAN-SPAM Act.
  • How long we keep it: the contact record (company, address, finding, dates of our emails and any reply) for up to 12 months after our last email. If you ask us to stop, we keep only your email address and domain on a do-not-contact list, so that we never write again.
  • Your choices: reply "no thanks" (or "unsubscribe") or write to info@nyorsoft.com. We stop the same day. You can also ask us what we hold about you or to delete it, and you have the other rights listed in section 12.

14. Third-Party Links

Our website may contain links to third-party websites or services.

We are not responsible for the content, privacy practices, or security of third-party websites. We encourage you to review their privacy notices separately.

15. Children's Privacy

Our website and services are intended for business and professional use only. They are not directed to children, and we do not knowingly collect personal data from children.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, legal obligations, or business operations.

The updated version will be posted on this page with a revised "Last updated" date.

17. Contact

If you have any questions about this Privacy Policy or our handling of personal data, please contact:

Nyorsoft s.r.o., Rudroffova 3, 831 06 Bratislava, Slovak Republic
Email: info@nyorsoft.com   Phone: +421 911 558 102