Privacy Policy

PresidioSec processes the personal data required to handle commercial requests, platform access, incident-support activation and the contractual relationship. The controller is the legal entity identified in the footer and in the applicable contractual documents.

For privacy requests, data subject rights or clarifications on processing, use the dedicated privacy lane published on this page and in the contact section.

We collect identity and contact data such as name, work email, company, role, phone number and the information submitted through demo, assessment and contact forms.

For authenticated users we may also process data related to workspace activity, playbook progress, template downloads and incidents activated within the workspace.

We process data to respond to commercial requests, provide the SaaS service, manage authentication, perform contractual obligations and, where applicable, comply with legal obligations related to security, invoicing and incident handling.

Legal bases include pre-contractual measures, contract performance, legal obligations and legitimate interest in keeping the service secure and managing the relationship with prospects and customers.

We retain data only for the time necessary to meet the declared purposes and apply retention policies to leads, assessments, audit trail events and operational requests. Retention periods vary according to data type, legal obligations and the stage of the commercial relationship.

When storage is no longer necessary or no longer required by law, data is deleted or made no longer attributable to the data subject.

Data subjects may request access, rectification, deletion, restriction, objection and portability within the limits established by the GDPR. They may also lodge a complaint with the competent supervisory authority.

To speed up handling, use the dedicated privacy lane and specify the company, reference contact and the right you want to exercise.