Last updated: 19 June 2026.
1. Data Controller
The controller of your personal data is Damian Banat Business Consulting, ul. Stefana Jaracza 32 lok. 19, 90-262 Łódź, Poland, VAT ID: 7322131065, REGON: 541620554 (hereinafter: "CCyber.io", "Controller").
For any matters related to the protection of your personal data, please contact us at: kontakt@ccyber.io or by post to the address above.
2. Data We Collect
We process only the data you voluntarily provide through the forms on the CCyber.io website, as well as data collected automatically when you use the site.
- Identification data: full name, company name, VAT ID
- Contact data: email address, phone number
- Message content: messages submitted through the contact form
- Application documents: CVs and files submitted via the job application form
- Technical data: IP address, browser type, cookies (see section 9)
3. Purposes and Legal Bases for Processing
We process your data for the following purposes and on the following legal bases:
- Handling contact enquiries and submitted forms – legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller in responding to correspondence)
- Providing services and processing orders (e.g. registrations for training, courses, bootcamps) – legal basis: Art. 6(1)(b) GDPR (necessity for the performance of a contract)
- Sending commercial and marketing information by email or phone – legal basis: Art. 6(1)(a) GDPR (your consent)
- Conducting recruitment processes – legal basis: Art. 6(1)(a) GDPR (your consent to process data for recruitment purposes)
- Handling company enquiries about candidates in the talent database – legal basis: Art. 6(1)(f) GDPR (legitimate interest)
- Fulfilling legal obligations (e.g. accounting, tax) – legal basis: Art. 6(1)(c) GDPR
- Pursuing or defending legal claims – legal basis: Art. 6(1)(f) GDPR
4. Data Retention Periods
We retain your data for the period necessary to fulfil the purpose for which it was collected:
- Contact form and enquiry data – for the duration of the enquiry and up to 2 years from the last contact (legitimate interest or potential claims)
- Training and bootcamp registration data – for the duration of the order and as required by law (accounting records for up to 5 years)
- Recruitment data (CVs, applications) – for 6 months from the end of the recruitment process or until consent is withdrawn
- Marketing data (email, phone) – until consent is withdrawn
- Candidate database data – until consent is withdrawn or a deletion request is received
5. Recipients of Personal Data
We may share your data with third parties that support our operations:
- Hosting and IT infrastructure providers
- Email and communication software providers
- Accounting and legal service providers
- Payment operators (for training purchases)
All data recipients act under data processing agreements and provide an appropriate level of protection. We do not sell your personal data.
Data may be transferred outside the European Economic Area only to countries ensuring an adequate level of protection or on the basis of standard contractual clauses.
6. Your Rights
Under the GDPR, you have the following rights:
- Right of access – you can obtain information about the data we process
- Right to rectification – you can request correction of inaccurate or completion of incomplete data
- Right to erasure ("right to be forgotten") – you can request deletion of your data when it is no longer needed or you withdraw consent
- Right to restriction of processing – you can request that processing be suspended in certain circumstances
- Right to data portability – you can receive your data in a structured, machine-readable format
- Right to object – you can object to processing based on legitimate interest
- Right to withdraw consent – you can withdraw consent at any time without affecting the lawfulness of prior processing
- Right to lodge a complaint – you have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland
To exercise any of the above rights, contact us at: kontakt@ccyber.io. We will respond without undue delay and no later than one month.
7. Data Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure. As a cybersecurity-specialist firm, we place particular importance on protecting the data of our clients and business partners.
Our measures include data transmission encryption (HTTPS/TLS), system access controls and regular security reviews.
8. Automated Decision-Making and Profiling
Your personal data is not used for automated decision-making, including profiling, that produces legal effects or otherwise significantly affects you.
9. Cookies and Analytics
The CCyber.io website may use cookies to ensure the correct operation of the site, analyse traffic and optimise content. Cookies are small text files stored on your device.
You can manage cookies through your browser settings. Restricting or blocking cookies may affect the functionality of the site.
The site may use Google reCAPTCHA to protect forms against spam and automated bots. In that case, Google's privacy policy applies: policies.google.com/privacy.
10. Changes to This Privacy Policy
We reserve the right to update this privacy policy at any time, in particular in connection with changes in law or changes in how we process data. The current version is always available at ccyber.io/privacy-policy.
We will notify you of significant changes by posting a notice on the site or by email, where we hold your email address.
11. Contact
For matters related to personal data protection, please contact us:
Damian Banat Business Consulting | kontakt@ccyber.io | tel. +48 791 142 667 | ul. Stefana Jaracza 32 lok. 19, 90-262 Łódź, Poland
