Privacy Notice

Data controller

Infinity Secure LLC, 8 The Green STE A, Dover, DE 19901

Email: privacy@infinity-secure.com

Purpose of processing

We process personal data to respond to contact inquiries, operate this website, and maintain security controls.

Categories of data

• Contact form details (for example name, email, company)
• Communication content submitted in your inquiry
• Technical access metadata (for example IP address and timestamp)

Legal basis

• Pre-contractual and contractual communication
• Legitimate interest in secure, reliable website operations
• Consent where explicitly requested

Hosting and server logs

This website is hosted by [hosting provider, address, server location]. When you visit the website, our web server automatically records technical access data: IP address, date and time of the request, requested page, referrer URL, HTTP status code, and browser and operating system details.

We use this data to deliver the website and to detect and defend against attacks. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). Log files are deleted after [number] days unless they are needed to investigate a specific security incident.

Contact form and email

When you use our contact form, we process the details you enter: service area, subject, name, email address and message, and optionally company and phone number. The form is sent by email via [our own mail server / mail provider] to our ticket system Jira Service Management, operated by Atlassian [Atlassian Pty Ltd, Sydney, Australia / Atlassian US, Inc., San Francisco, USA – check contracting entity], which processes the data on our behalf (Art. 28 GDPR). The same applies when you email us directly.

We use the data to handle your inquiry and any follow-up communication. Legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract or pre-contractual steps, and Art. 6(1)(f) GDPR (legitimate interest in answering inquiries) in all other cases. We delete inquiries [retention period, e.g. three years after the last contact] unless statutory retention obligations apply.

Appointment booking (Microsoft Bookings)

Our contact page links to an appointment booking page in Microsoft 365 (Microsoft Bookings / Outlook "Book with me"). No data is sent to Microsoft until you follow this link.

When you book an appointment, Microsoft processes the details you enter (name, email address, chosen time slot and any notes) and technical data such as your IP address on our behalf (Art. 28 GDPR). Provider is [Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA – check contracting entity]. Microsoft may set its own cookies on the booking page. Legal basis is Art. 6(1)(b) GDPR (scheduling a meeting at your request). For more information, see the Microsoft Privacy Statement.

Cookies and consent

This website sets two technically necessary cookies. A session cookie protects our forms against cross-site request forgery and carries short status messages from one page to the next; it is deleted when you close your browser. The cookie "analytics_consent" stores your choice in the consent banner for 180 days. Neither cookie contains tracking data. Legal basis is Art. 5(3) of the ePrivacy Directive as implemented in national law (in Germany § 25(2) No. 2 TDDDG) and Art. 6(1)(f) GDPR.

Analytics tools and cookies are only used with your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer of every page. When you withdraw, we delete the analytics cookies set on our domain.

Google Tag Manager and Google Analytics

With your consent, we use Google Tag Manager and Google Analytics 4. Google Tag Manager is only loaded after you click "Accept" in the consent banner. For users in the European Economic Area and Switzerland, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for all other users, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Tag Manager lets us manage the tags embedded in our website. It loads other services such as Google Analytics but does not create user profiles itself. When it loads, Google receives your IP address and technical browser data.

Google Analytics helps us understand how visitors use our website: pages viewed, time spent, referring website, approximate location derived from your IP address, and device and browser information. For this purpose, cookies (_ga, _ga_<ID>) with a lifetime of up to two years are stored on your device. According to Google, Google Analytics 4 does not log or store IP addresses. We have set the retention period for analytics data to [2 / 14 months]. We have concluded a data processing agreement with Google [verify: data processing terms accepted in the Google Analytics admin].

Legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. For more information, see Google's Privacy Policy.

Google Maps

Our About page can display maps from Google Maps (provider as described above). A map only loads after you click "Load map". Google then receives your IP address, browser information and the address of our page, and may read cookies that Google has already set in your browser, for example if you are signed in to a Google account. We have no influence on how Google processes this data further.

Legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you give by clicking the button. The link "Open in Google Maps" takes you to Google's website, where Google's Privacy Policy applies.

Fonts

The fonts used on this website (Manrope and IBM Plex Sans) are hosted on our own server. Visiting this website does not establish a connection to Google Fonts or any other font provider.

International data transfers

Infinity Secure LLC is based in the United States, so if you contact us from the EU or EEA, your data is processed in the USA. Our service providers Google, Microsoft and Atlassian may also process data in the USA or in other countries outside the EU/EEA.

For the USA, the European Commission has adopted an adequacy decision for companies certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). [verify that Google LLC, Microsoft Corporation and Atlassian are certified at dataprivacyframework.gov] Where no adequacy decision applies, we base transfers on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Retention

Data is retained only as long as required for the stated purpose or applicable legal obligations.

Your rights

• Access, correction, and deletion
• Restriction of processing
• Data portability
• Objection rights where applicable
• Withdrawal of consent at any time, with effect for the future (Art. 7(3) GDPR)

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).