TLP:CLEAR/ Public site — no client information Remote · based in Spain · --:--Z
Home/Privacy policy
Legal

Privacy policy

This site has no forms, no analytics and no external resources. Fonts are served from this same domain: browsing makes no connection to any third-party server. This is a courtesy translation; in the event of any discrepancy, the Spanish version prevails.

1. Data controller

ControllerJAYMON SECURITY, S.L.
Tax IDB88291174
AddressCalle Malaquita 25, 28224 Pozuelo de Alarcón (Madrid), Spain
Contactareatec@insiderops.es

2. Data processed through the website

Browsing this site involves no processing of personal data by the controller: there are no forms, no cookies are set and no audience measurement tools are used. Technical logs generated by the hosting provider are processed under that provider's responsibility, under the data processing agreement in place.

3. Contact by email or Telegram

If you start a conversation through any published channel, the controller will process the data you choose to provide (user identifier or email address, name, organisation and message content).

PurposeTo handle the enquiry, assess the engagement and, where appropriate, prepare a service proposal
Legal basisPre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR) and legitimate interest in managing the commercial relationship (Art. 6(1)(f) GDPR)
RetentionFor as long as mutual interest lasts and, after closure, for the applicable statutory limitation periods
RecipientsThe email provider and, where used, Telegram as messaging provider. Data is not transferred to other third parties except by legal obligation
TransfersUse of Telegram may involve processing outside the European Economic Area, under that provider's terms

If you prefer not to use a third-party messaging service, use the corporate email address or request an alternative channel before providing any data.

4. Data processed during an engagement

Delivery of assessment, incident response or expert witness services may involve access to personal data owned by the client. In that case the owner acts as a processor, and the relationship is governed by the contract required under Article 28 GDPR, covering security measures, confidentiality obligations, sub-processing and certified return or destruction of material on completion.

5. Rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the address in section 1, evidencing your identity. If you consider the processing does not comply with the regulation, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).

6. Security

Technical and organisational measures proportionate to the risk are applied, including encryption of client material in transit and at rest, need-to-know access control and certified destruction at the close of each engagement.

Last updated: 29 August 2026