This policy complements the Data Protection Notice; it explains how we protect your data and which service providers we work with.
Data security measures
- Site traffic is encrypted with an SSL/TLS certificate
- Access to the admin panel is granted only to authorised people, and two-step verification is used
- Documents uploaded through the form are stored in an area with restricted access
- Backups are taken regularly and kept encrypted
- Software updates are applied regularly
- In the event of a data breach, notification is made to the Board and to the individuals concerned within the period prescribed by the Data Protection Notice
The service providers we work with
| Area | Provider |
|---|---|
| Hosting | [PROVIDER] — server location: [LOCATION] |
| E-mail delivery | [PROVIDER] — for form notifications |
| Analytics | Google Analytics 4 (only where consent has been given) |
| Form infrastructure | Hosted on the site itself, not transferred to any third party |
| Contact | WhatsApp Business (when you write to us, that platform’s own privacy terms also apply) |
Children’s data
This site is not directed at people under the age of 18, and we do not knowingly collect personal data from anyone under 18.
Changes to this policy
When this policy is updated, the update date at the bottom of the page changes. For significant changes, the people on our e-mail list are informed.
Last updated: [DATE]