This privacy notice is provided pursuant to Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) to users who consult the website https://bastionguard.eu. This notice applies exclusively to the BastionGuard website and does not apply to other websites that may be accessed via external links.
Data Controller
The Data Controller of personal data relating to identified or identifiable persons who access and browse this website is:
Calogero Scarnà
Email: info@bastionguard.eu
Legal Basis for Processing
Personal data are processed on the basis of the legitimate interest of the Data Controller (Article 6(1)(f) GDPR) in ensuring the security, integrity, and proper functioning of the website and related services, as well as in preventing fraud and abuse.
Where required by applicable law, specific processing activities may be based on the data subject’s consent (Article 6(1)(a) GDPR). Where consent is used, it may be withdrawn at any time by contacting info@bastionguard.eu. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Processed Data and Purposes of Processing
Security Logging and Monitoring of File Submissions
Logging of Submissions
When you submit files through our platform, we automatically log and monitor submission-related activities. This may include user identifiers, IP address, timestamps, file metadata, system identifiers, and other technical data necessary to ensure platform security and integrity.
Purpose of Processing
Such data is processed for the purposes of:
- safeguarding system security and preventing unauthorized access;
- detecting, preventing, and investigating fraud or malicious activities;
- ensuring service integrity and operational reliability;
- complying with legal and regulatory obligations.
Retention Period
Security logs are retained for 48 hours from the time of collection. After this period, they are automatically deleted or anonymized, unless a longer retention period is required by applicable law or is strictly necessary in connection with the investigation of a security incident.
Browsing Data
Access to and navigation within this website take place through the use of a web browser. Certain data necessary for internet navigation may include IP addresses, domain names of the devices used by users, URI (Uniform Resource Identifier) addresses of requested resources, request time, and other technical parameters.
These data are processed exclusively for the purposes of ensuring the proper technical functioning of the website, protecting the security and integrity of the system, and preventing and mitigating fraud, abuse, or cyberattacks. Data may also be used to ascertain responsibility in the event of computer-related crimes or attempted attacks against this website.
No profiling or marketing activities are carried out. This website does not use analytics services.
Data Voluntarily Provided by the User
The optional, explicit, and voluntary sending of email to the addresses indicated on this website entails the acquisition of the sender’s email address, necessary to respond, as well as any other personal data included in the message.
Such data are processed solely to respond to received messages and to fulfill related requests. Failure to provide personal data for communication purposes prevents the fulfillment of such requests. Data are retained only for the period strictly necessary to achieve the purposes for which they are processed.
Cookies
This website uses only technical/session cookies that are strictly necessary to ensure safe and efficient navigation and proper website functionality. These cookies do not require user consent under applicable law, as they are essential for the operation of the website.
No profiling cookies are used. Users may configure their browser preferences to refuse cookies. Disabling technical cookies may result in difficulties interacting with the website.
Network and Security Service Provider (Cloudflare)
Our website uses services provided by Cloudflare, Inc. or Cloudflare Italy, which acts as our data processor. Cloudflare provides website performance optimization and protection against cyberattacks.
To provide these services, Cloudflare may use strictly necessary cookies, such as the __cf_bm cookie, which are used to distinguish human traffic from automated traffic and to mitigate malicious automated activity.
As these cookies are strictly necessary for the security and proper functioning of the website, they do not require the user’s prior consent. However, they are disclosed here to ensure maximum transparency in accordance with the GDPR.
Personal data is processed in accordance with Cloudflare’s Privacy Policy.
Protection against spam registrations
To protect this website from spam and automated (bot) registrations, when you create an account we check the data you submit. This happens only when you register, and the website sets no cookies for it.
Data checked: your IP address, email address and username, technical information sent by your browser (such as User-Agent, language and the page you came from), how long it took to fill in the form, and whether your browser ran JavaScript.
Services we use:
- CleanTalk (CleanTalk Inc.) receives your IP address, email address, username and browser information, and tells us whether the registration is spam. Privacy policy: https://cleantalk.org/publicoffer#privacy
- StopForumSpam receives your IP address and an encrypted fingerprint (MD5 hash) of your email address, not the email address itself. Privacy policy: https://www.stopforumspam.com/privacy
- Public DNS blacklists (Spamhaus, DroneBL, EFnet RBL, dan.me.uk) receive your IP address, and Spamhaus also receives the domain of your email address (for example “gmail.com”), to check whether they are known sources of spam.
- If your registration is blocked, your IP address is sent to ipwho.is to find its approximate location (country and city).
Some of these providers may process data outside the European Union.
What we keep: if a registration is blocked, we keep a record on this website with the date, IP address, email address, approximate location and the reason for the block, to protect the site and fix any mistakes. Only the most recent [200] blocked attempts are kept: older records are deleted automatically. Check results are kept temporarily, for up to 24 hours.
Legal basis: our legitimate interest in protecting the website and its users from spam, abuse and fake accounts (Article 6(1)(f) GDPR).
Your rights: you can ask to access or delete your data, or object to its processing, by writing to info@bastionguard.eu. If your registration was blocked by mistake, contact us at the same address and we will check it.
Recipients
Personal data may be processed by authorized personnel and by external service providers acting as data processors pursuant to Article 28 GDPR (e.g., hosting providers and technical service providers), solely for the purposes indicated in this notice. Personal data are not sold or disclosed for marketing purposes.
Security Measures
Personal data are processed lawfully and fairly, adopting appropriate technical and organizational security measures to prevent unauthorized access, disclosure, alteration, or destruction. Data transmission is protected by SSL/TLS encryption. Access to data is restricted to authorized personnel and service providers as necessary.
Data Subject Rights
Data subjects may exercise the rights provided under Articles 15 to 22 GDPR (including access, rectification, erasure, restriction, portability, and objection) by submitting a request to: info@bastionguard.eu.
Right to Lodge a Complaint
Data subjects who believe that the processing of their personal data through this website violates the GDPR have the right to lodge a complaint with the competent Data Protection Authority pursuant to Article 77 GDPR.