Privacy Policy

01

Who we are

SEQ SIA, registration number 40203410806, Lastādijas iela 12 k-3, Riga, LV-1050, Latvia. For privacy-related enquiries, contact support@offseq.com. We have not appointed a Data Protection Officer because applicable law does not require us to do so.

02

What we process

The website has no contact forms, user accounts, newsletter sign-up or comment system and does not collect personal data through those features. The interactive self-assessment tools for scope, maturity and NIS2 run entirely in your browser; their results are not sent to us. We process personal data only in the following limited cases:

Information you choose to send us – if you email us at support@, jobs@, partners@ or training@offseq.com, or call us, we receive the information you provide, typically your name, email address or phone number, organisation and message content.

Server logs – as with most websites, our server briefly records limited technical data for each request, including the IP address, browser or user-agent identifier and timestamp. We use these data only to keep the website secure and operational.

Aggregate analytics – we measure overall website usage with a self-hosted analytics solution that does not use cookies and produces only aggregate, non-identifying statistics.

03

Legal bases

Responding to enquiries and communicating with you – our legitimate interests (Article 6(1)(f) GDPR).

Providing services to clients – performance of a contract or steps taken before entering into a contract (Article 6(1)(b) GDPR).

Keeping accounting and other records where required by law – compliance with a legal obligation (Article 6(1)(c) GDPR).

Server logs and aggregate analytics – our legitimate interests in securing the website and understanding its overall use (Article 6(1)(f) GDPR).

Providing your information is voluntary; if you do not share contact details, we may be unable to reply.

04

Cookies & analytics

We do not use cookies or track you across websites. Website usage is measured with a self-hosted analytics solution that does not set cookies, store information on your device or collect identifying data. Therefore, no cookie-consent banner is required for this analytics.

The only information stored on your device is your light- or dark-theme preference and, if you use the CISO-as-a-Service intake tool, your unsaved answers so you can resume them. Both are kept in your browser’s local storage and are not sent to us.

05

Sharing

We do not sell personal data or share it for advertising. A limited number of service providers process data on our behalf under appropriate agreements: our hosting and infrastructure provider serves the website and processes server logs, while our email provider handles messages sent to us. Our analytics are self-hosted. We may also disclose data where required by law.

06

International transfers

We aim to keep personal-data processing within the European Union and European Economic Area (EEA). If a service provider processes data outside the EEA, we ensure that an appropriate GDPR transfer safeguard is in place, such as a European Commission adequacy decision or Standard Contractual Clauses.

07

Retention

We keep personal data only for as long as necessary for the purpose for which it was collected. We retain email correspondence while it is needed to handle your enquiry or our business relationship and then delete it. Server logs are retained only briefly, and accounting records are kept for the period required by Latvian law. Aggregate analytics do not contain personal data.

08

Your rights

Subject to the conditions of the GDPR, you may request access to, rectification or erasure of your personal data, restriction of processing or data portability, and you may object to processing. To exercise these rights, contact support@offseq.com. We do not carry out automated decision-making or profiling.

If you believe that we have processed your data unlawfully, you may lodge a complaint with the Latvian supervisory authority – Datu valsts inspekcija (Data State Inspectorate), Elijas iela 17, Riga, LV-1050, telephone +371 67223131, pasts@dvi.gov.lv, www.dvi.gov.lv, opens in a new tab – or with the supervisory authority in the EU or EEA country where you live or work.

09

Security

We apply appropriate technical and organisational measures to protect personal data against unauthorized access, loss, alteration and misuse.

10

Contact

Questions about this policy may be sent to support@offseq.com. We may update the policy periodically; the current version and its last-updated date are shown on this page.