Privacy Policy

1. Controller

The data controller for this website and related marketing contact forms is Evaluris Solutions OÜ, registered in Estonia (Tallinn). SPECTER is a product of Evaluris Solutions OÜ. For privacy inquiries, contact [email protected].

2. Scope

This policy describes how we process personal data when you visit specter.evaluris.com or submit a contact or mission-request form. It does not replace contractual data processing terms for paid SPECTER deployments, which are set out in the relevant customer agreement.

3. Data we collect

When you submit a form, we may collect:

• Name and professional email address
• Company or organization name
• Role or job title (if provided)
• Message content, requested test scopes, and related notes

Technical logs (e.g. IP address, user agent, timestamps) may be processed by our hosting and security providers as needed to operate and protect the website.

4. Purposes and legal bases

• Responding to inquiries (Art. 6(1)(b) GDPR where steps are taken at your request prior to a contract, or Art. 6(1)(f) legitimate interests in answering business inquiries).
• Operating and securing the website (Art. 6(1)(f) legitimate interests).
• Consent where we rely on consent for optional communications (Art. 6(1)(a)); you may withdraw consent at any time.

5. Retention

Contact and mission-request records are retained for up to 24 months after the last meaningful correspondence, unless a longer period is required for an active commercial relationship, legal claim, or statutory obligation. Website logs are retained for a shorter operational period consistent with security practice.

6. Where data is processed

For this marketing website and related inquiry handling, personal data is processed within the EU/EEA where practicable, consistent with Evaluris Solutions OÜ being an Estonian controller. Where a processor outside the EU/EEA is used, we implement appropriate safeguards (such as Standard Contractual Clauses) as required by GDPR Chapter V.

Customer SPECTER deployments (Managed, Private, or Hybrid) follow the data residency and processing terms agreed in the customer contract. Private and Hybrid models are designed so engagement data can remain within your chosen perimeter or EU/EEA hosting boundary.

7. Recipients and processors

We use service providers for website hosting, email delivery, and form handling. They process data only on our instructions and under appropriate contracts. We do not sell personal data.

8. Your rights (GDPR)

You have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten") where applicable
• Restriction of processing
• Data portability where applicable
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise these rights, email [email protected]. You also have the right to lodge a complaint with a supervisory authority. For Evaluris Solutions OÜ, the relevant authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). See www.aki.ee.

9. Cookies

Essential cookies may be used to operate the site (including remembering a language preference you choose). We do not use advertising trackers on this site by default. If analytics are added later, this policy will be updated and consent obtained where required.

10. Updates

We may update this policy from time to time. The "Last updated" date below reflects the current version. Material changes will be reflected on this page.