Privacy Policy

1. General Provisions

This Privacy Policy governs the collection, processing, storage, and protection of personal data obtained through this website and in the course of providing services.

The Company processes personal data in accordance with applicable data protection legislation and generally accepted principles of confidentiality, integrity, and availability.

2. Scope of Application

This Policy applies to all personal data processed by the Company, whether collected electronically, in writing, or through other lawful means, including data obtained via the website, communication channels, and contractual relationships.

3. Categories of Personal Data

The Company may process the following categories of personal data:

• Identification and contact data (name, email address, telephone number)
• Business-related information provided by representatives of legal entities
• Communication content submitted through forms or correspondence
• Technical and usage data (IP address, device type, browser information, access logs)

The Company does not intentionally process special categories of personal data unless required by law or explicitly provided within a contractual framework.

4. Purposes of Processing

Personal data is processed exclusively for legitimate business and legal purposes, including:

• Establishing and maintaining communication with clients and partners
• Evaluation of service requests and preparation of proposals
• Performance of contractual and pre-contractual obligations
• Administration, security, and operation of IT systems
• Prevention of unauthorized access, abuse, or fraudulent activity
• Compliance with applicable legal and regulatory requirements

5. Legal Grounds for Processing

Processing of personal data is based on one or more of the following legal bases:

• Consent of the data subject
• Necessity for the performance of a contract or pre-contractual measures
• Compliance with legal obligations imposed on the Company
• Legitimate interests pursued by the Company, including operational security and service improvement

6. Data Minimization and Accuracy

The Company processes only personal data that is adequate, relevant, and limited to what is necessary for the stated purposes.

Reasonable measures are taken to ensure personal data is accurate and, where necessary, kept up to date.

7. Data Retention

Personal data is retained for the minimum period necessary to achieve the purposes of processing or to comply with statutory, contractual, or regulatory obligations.

Upon expiration of the retention period, personal data is securely deleted, anonymized, or archived in accordance with legal requirements.

8. Disclosure and Data Transfers

Personal data is not sold, leased, or otherwise disclosed to third parties, except in the following circumstances:

• To authorized service providers acting under written confidentiality obligations
• Where disclosure is required by applicable law, court order, or lawful authority
• Where necessary to protect the Company's legal rights or interests

Where applicable, data transfers are performed with appropriate safeguards in place.

9. Information Security Measures

The Company implements appropriate technical and organizational measures to ensure the security of personal data, including but not limited to:

• Access control based on role and authorization
• Secure network and system configurations
• Logging, monitoring, and incident response procedures
• Regular risk assessment and security reviews

While all reasonable measures are taken, absolute security cannot be guaranteed.

10. Cookies and Similar Technologies

The website may use cookies and similar technologies strictly necessary for functionality, security, and performance optimization.

Detailed information regarding cookies is provided in the Cookie Policy.

11. Rights of Data Subjects

Subject to applicable law, data subjects have the right to:

• Request access to personal data processed by the Company
• Request rectification of inaccurate or incomplete data
• Request erasure or restriction of processing
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent
• Lodge a complaint with a competent supervisory authority

Requests must be submitted in writing using the contact details below.

12. Third-Party Resources

This website may contain references or links to third-party resources.

The Company bears no responsibility for the data protection practices or content of such resources.

13. Amendments

The Company reserves the right to amend this Privacy Policy at any time.

The current version shall be published on this website and shall enter into force upon publication.

14. Contact Information

All inquiries regarding personal data processing and this Privacy Policy should be addressed to:

Email: info@cysec.am

Effective Date

This Privacy Policy is effective as of the date of publication on this website.