How we handle data
We collect only what is needed to assess whether a case is suitable and to reach you safely. This text describes the intended practice for the public launch.
Provisional text. This document was prepared internally and is pending review by a Croatian lawyer and a data protection officer before public launch. We do not describe it as legally approved.
Data controller
The data controller is SKYFRAME, obrt za video produkciju i usluge, owned by Nikola Zec, with its registered address at Ulica kralja Zvonimira 24, Zagreb. The service is provided under the Signum Cyber brand.
No tracking cookies
This site uses no tracking cookies, no behavioural analytics and no third-party advertising scripts.
The assessment is currently entirely browser-side: answers live only in the page's memory while it is open and are not sent anywhere.
What we will collect once intake is active
When submissions are switched on, the form will collect:
- a first name or pseudonym,
- an email address or phone number, whichever you choose,
- your preferred safe channel and safe time to be contacted,
- the technical answers from the assessment and an optional description of up to 500 characters.
Retention
The target for deleting public assessment submissions for unaccepted or abandoned cases is 30 days.
For accepted cases, data is kept for as long as running the case and legal obligations require; this is set out in the case documentation.
What we do not store in this system
This web application does not store raw device backups, data exports, evidence material or client passwords. Reports are delivered through a secure expiring download, with the access code sent through a separate channel.
Your rights
Under European Union data protection law you have the right of access, rectification, erasure and restriction of processing, and the right to object.
The channel for exercising those rights and the corresponding contact details will be published before the public launch. We do not list a data protection officer or a supervisory authority contact until legal review confirms them.