SteadySec Your retained security partner

At full delivery capacity until the end of 2026.

Privacy notice

This site is built to collect as little as possible. No cookies, no advertising trackers, no profiling, and nothing sold to anyone. Page views are counted in aggregate so we know which topics are worth writing about. This notice explains the small amount of data that is processed, why, and the rights you have under the GDPR .

Last updated: 15 August 2026

At a glance

What this site does and does not do

  • No cookies are set, and no cookie consent banner is needed. One browser-local setting remembers whether you chose the light or dark theme; it never leaves your device and is not used to identify you.
  • No advertising trackers, fingerprinting, or cross-site tracking.
  • No profiling and no automated decisions about you.
  • Your data is never sold, rented, or shared for marketing.
  • Page views are counted with counter.dev, a cookieless analytics service. It reports totals per page and country; it does not set cookies, store an identifier on your device, or follow you to other sites.
  • Email and bookings are handled through encrypted, privacy-first services.

Who is responsible

The data controller

The company that decides how and why your data is processed (the data controller) is:

Steady Security s.r.o.

Jaurisova 515/4, 140 00 Praha 4 - Michle, Czech Republic

IČO: 10695451

Email: hello@steadysec.eu

Given the very limited scope of processing, there is no statutory requirement to appoint a Data Protection Officer. Any question about your data goes to the email address above.

The detail

How your data is processed

Email correspondence

Purpose
Answer your enquiry, manage any conversation that follows, and keep you informed about relevant services from time to time.
Data
Your name, your email address, and anything you choose to write in your message.
Recipients
Stored in an end-to-end encrypted Proton Mail mailbox operated by Proton AG (Switzerland).
Legal basis
Taking steps at your request before a possible contract, and our legitimate interest in replying to enquiries and offering relevant services (Article 6(1)(b) and (f)). You can object to marketing contact at any time, with no effect on anything else.
Retention
We generally keep business contact details for up to 10 years so we can follow up on relevant services. You can ask us to delete them, or to stop hearing from us, at any time.

Call bookings

Purpose
Schedule and hold a call that you request.
Data
Your name, your email address, and the time slot you choose.
Recipients
Proton Calendar, operated by Proton AG (Switzerland).
Legal basis
Steps taken at your request before a possible contract (Article 6(1)(b)).
Retention
Removed once the booking is no longer needed for our records.

Hosting and delivery

Purpose
Serve the website to your browser and protect it from abuse.
Data
Standard connection data, including your IP address, processed transiently to deliver the page and to keep the site secure and available.
Recipients
Cloudflare, Inc. (Cloudflare Workers), acting as hosting provider on our behalf.
Legal basis
Our legitimate interest in running a secure, reliable website (Article 6(1)(f)).
Retention
Held briefly in edge and security logs in line with the host's own policy.

Visitor statistics

Purpose
Count how many people read each page, so we know which topics are worth writing about.
Data
One page view per visit: the page address, the page that referred you, and coarse technical details your browser sends anyway (browser, operating system, screen size, language, and the country derived from your connection). No cookie is set, no identifier is stored on your device, and nothing links one visit to another or to you personally.
Recipients
counter.dev, a cookieless analytics service operated from the EU. Only the aggregate totals are visible to us.
Legal basis
Our legitimate interest in understanding, in aggregate, which content is useful (Article 6(1)(f)). Because no information is stored on or read from your device, no consent banner is required.
Retention
Held by the provider as aggregate counts. We keep no raw visit records ourselves.

Discovery questionnaire

Purpose
Let you self-assess your security position and, if you wish, share the result with us.
Data
Your answers are processed entirely inside your own browser. Nothing is transmitted to us or anyone else unless you actively choose to email the summary.
Recipients
No one, unless you send the result by email, in which case it is handled exactly as email correspondence above.
Legal basis
No processing by us takes place until you choose to send your answers.
Retention
Nothing is stored on the website.

Where data goes

International transfers

Some of the services above operate outside the European Economic Area. Each transfer rests on a recognised legal safeguard:

  • Proton (Switzerland) - covered by the European Commission's adequacy decision for Switzerland.
  • Cloudflare (United States) - covered by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

What you can ask for

Your rights

Under the GDPR you have the following rights over your personal data. To exercise any of them, email hello@steadysec.eu. There is no charge, and we will respond within one month.

Access
Ask for a copy of the personal data we hold about you.
Rectification
Ask us to correct data that is wrong or incomplete.
Erasure
Ask us to delete your data where there is no overriding reason to keep it.
Restriction
Ask us to pause processing while a concern is resolved.
Portability
Receive the data you gave us in a portable, machine-readable form.
Objection
Object to processing based on legitimate interest, including any direct outreach.

There is no automated decision-making or profiling on this site.

If something is wrong

Raising a complaint

Please contact us first so we can put things right. You also have the right to complain to the Czech supervisory authority at any time:

Úřad pro ochranu osobních údajů (ÚOOÚ)

Pplk. Sochora 27, 170 00 Praha 7, Czech Republic

uoou.gov.cz

Keeping this current

Changes and questions

If the way this site works changes, this notice is updated and the date at the top is revised. Material changes will be made clear here. For anything about your privacy or this notice, reach me through any channel below.

How the site itself is secured, and how to report a weakness in it, is set out in the security and vulnerability disclosure policy.

Book a discovery call Email