Privacy Policy

1. Introduction

20Tau Systems OÜ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our information security training services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email, phone number, address)
• Company or organization details
• Professional information and training requirements
• Payment information (processed through secure payment processors)
• Training progress and completion records

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser information
• Device information and operating system
• Pages visited and time spent on our website
• Referral source and search terms

3. How We Use Your Information

We use the information we collect to:

• Provide and deliver training services
• Process registrations and payments
• Communicate about courses, updates, and support
• Improve our services and website functionality
• Comply with legal obligations
• Prevent fraud and ensure security

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: To fulfill our training service agreements
• Legitimate Interest: To improve services and prevent fraud
• Consent: For marketing communications (where required)
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share information in the following circumstances:

• With service providers who assist in delivering our services
• To comply with legal obligations or court orders
• To protect our rights, property, or safety
• In connection with business transfers or acquisitions
• With your explicit consent

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Training records are typically retained for certification and regulatory compliance purposes.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests
• Restriction: Request limitation of processing
• Withdraw Consent: Withdraw consent for consent-based processing

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings. For detailed information, please see our Cookie Policy.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

If you are located in the EU and believe we have not addressed your concerns, you have the right to lodge a complaint with the relevant supervisory authority in your country.