Effective date: 20 April 2026
Last updated: 20 April 2026

1. Introduction

This Cookie Policy explains how 7Security GmbH ("we", "us", or "our") uses cookies and similar technologies when you visit https://pci.7sec.com.
It explains what cookies are, why we use them, and how you can manage your preferences.
By using our website, you agree to the use of cookies in accordance with this Cookie Policy and your selected preferences.

2. What Are Cookies?

Cookies are small text files stored on your device when you visit a website.
Cookies help websites function properly, remember your preferences, improve user experience, analyse website traffic, and support marketing activities.
Some cookies are essential for the operation of the website, while others require your consent.

3. Types of Cookies We Use

3.1 Necessary Cookies

These cookies are essential for the operation of our website and cannot be disabled.
They are used to:

• Maintain website security

• Prevent fraud

• Process form submissions

• Manage user sessions

• Store your cookie preferences

Legal basis: Legitimate Interest (Article 6(1)(f) GDPR)

3.2 Functional Cookies

Functional cookies improve your browsing experience by remembering your preferences and enabling additional website features.
These cookies may be used to:

• Remember website preferences

• Support embedded scheduling tools

• Improve website functionality

These cookies are optional and require your consent where applicable.

3.3 Analytics Cookies

Analytics cookies help us understand how visitors use our website.
They allow us to collect information such as:

• Pages viewed

• Time spent on pages

• Navigation paths

• Device type

• Browser type

• Approximate location

• Traffic sources

This information is aggregated and helps us improve our website and services.
We currently use:

• Google Analytics 4

• Microsoft Clarity

Legal basis: Consent (Article 6(1)(a) GDPR)

3.4 Marketing Cookies

Marketing cookies help us understand the effectiveness of our advertising campaigns and display more relevant advertisements.
They may be used to:

• Measure campaign performance

• Deliver personalized advertising

• Enable remarketing and retargeting

• Measure conversions

We currently use:

• Google Ads

• Meta (Facebook) Pixel — used to measure and retarget across Facebook and Instagram

• LinkedIn Ads / LinkedIn Insight Tag — used to measure ad performance and retarget on LinkedIn

Legal basis: Consent (Article 6(1)(a) GDPR)

4. Third-Party Services

Some features of our website rely on trusted third-party service providers.
These providers may process personal data in accordance with their own privacy policies.
Services used on our website may include:

• Google Analytics

• Google Ads

• Meta (Facebook) Pixel

• Microsoft Clarity

• LinkedIn Ads / LinkedIn Insight Tag

• Calendly

• NetHunt CRM

• Zapier

• Cloudflare

5. Cookie Retention

Cookies remain on your device for different periods depending on their purpose.

• Session Cookies — Deleted when the browser is closed

• Functional Cookies — Up to 12 months

• Analytics Cookies — Up to 24 months

• Marketing Cookies — Up to 24 months

• Cookie Consent Preferences — Up to 12 months

6. Managing Cookies

When you first visit our website, you are presented with a Cookie Banner that allows you to:

• Accept all cookies

• Reject non-essential cookies

• Manage your cookie preferences

You may change your preferences at any time by clicking "Cookie Settings" available on our website.
You can also delete or block cookies through your browser settings.
Please note that disabling certain cookies may affect the functionality of the website.

7. International Data Transfers

Some of the third-party providers we use may process personal data outside the European Economic Area (EEA).
Where such transfers occur, we ensure appropriate safeguards are implemented, including:

• European Commission Adequacy Decisions

• Standard Contractual Clauses (SCCs)

• Other safeguards permitted under the GDPR

8. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legal requirements, or our business practices.
The latest version will always be available on this page.

9. Contact

If you have any questions regarding this Cookie Policy or our use of cookies, please contact us:
7Security GmbH
Hiessgasse 12/3, 1030 Vienna, Austria
Registration Number: FN561824m
VAT Number: ATU77298229
Website: https://pci.7sec.com
Email: contact@7sec.com

Effective date: 20 April 2026
Last updated: 20 April 2026

1. Introduction

These Terms of Use ("Terms") govern your access to and use of the website https://pci.7sec.com (the "Website"), operated by 7Security GmbH ("Company", "we", "us", or "our").
By accessing or using this Website, you agree to be bound by these Terms. If you do not agree with these Terms, please do not use the Website.

2. Company Information

7Security GmbH
Hiessgasse 12/3, 1030 Vienna, Austria
Registration Number: FN561824m
VAT Number: ATU77298229
Website: https://pci.7sec.com
Email: contact@7sec.com

3. Purpose of the Website

The Website provides information about our PCI DSS consulting, compliance and certification services.
Nothing on this Website constitutes legal, financial or regulatory advice.
The information provided is for general informational purposes only.

4. Acceptable Use

You agree not to:

• Use the Website for any unlawful purpose;

• Attempt to gain unauthorized access to our systems;

• Interfere with the operation or security of the Website;

• Upload malicious software or harmful code;

• Copy, reproduce or distribute Website content without our prior written permission.

5. Intellectual Property

Unless otherwise stated, all content available on this Website, including but not limited to:

• text;

• graphics;

• logos;

• branding;

• icons;

• images;

• design;

• downloadable materials;

is the property of 7Security GmbH or its licensors and is protected by applicable intellectual property laws.
No content may be copied, modified, distributed or reused without our prior written consent.

6. Third-Party Links

Our Website may contain links to third-party websites for your convenience.
We do not control these websites and are not responsible for their content, security or privacy practices.
Accessing third-party websites is at your own risk.

7. Disclaimer

The information published on this Website is provided on an "as is" and "as available" basis.
While we make reasonable efforts to ensure that the information is accurate and up to date, we make no warranties or representations regarding:

• completeness;

• accuracy;

• reliability;

• suitability;

• availability of the Website or its content.

8. Limitation of Liability

To the maximum extent permitted by applicable law, 7Security GmbH shall not be liable for any direct, indirect, incidental, consequential or special damages arising from or related to:

• use of this Website;

• inability to access the Website;

• reliance on information published on the Website;

• interruptions or technical issues.

Nothing in these Terms excludes liability where such exclusion is prohibited by applicable law.

9. Privacy

Your use of this Website is also governed by our Privacy Policy and Cookie Policy.
Please review these documents to understand how we process your Personal Data.

10. Changes to These Terms

We may update these Terms from time to time.
The latest version will always be published on this page together with the updated effective date.
Continued use of the Website constitutes acceptance of the updated Terms.

11. Governing Law

These Terms shall be governed by and interpreted in accordance with the laws of Bulgaria, without regard to conflict of law principles.
Any disputes arising out of or relating to these Terms shall be subject to the exclusive jurisdiction of the competent courts of Vienna, Austria, unless otherwise required by applicable law.

12. Contact

If you have any questions regarding these Terms, please contact us:
7Security GmbH
Hiessgasse 12/3, 1030 Vienna, Austria
Registration Number: FN561824m
VAT Number: ATU77298229
Website: https://pci.7sec.com
Email: contact@7sec.com

Effective date: 20 April 2026
Last updated: 20 April 2026

1. Controller Information

This Privacy Policy explains how 7Security GmbH ("we", "us", "our") collects, uses, stores and protects Personal Data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").
Data Controller:
7Security GmbH
Hiessgasse 12/3, 1030 Vienna, Austria
Registration Number: FN561824m
VAT Number: ATU77298229
Website: https://pci.7sec.com
Email: contact@7sec.com

2. Personal Data We Collect

2.1 Information You Provide

We may collect the following information when you contact us or use our services:

• Full name

• Business email address

• Phone number

• Company name

• Job title

• Country

• Information submitted through contact forms

• Information provided during consultations, meetings or certification projects

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address

• Browser type and version

• Device information

• Operating system

• Approximate geographic location

• Website usage data (pages visited, time spent on pages, referring website)

• Cookies and similar tracking technologies

3. Purpose of Processing

We process Personal Data for the following purposes:

• Responding to enquiries

• Providing requested information and services

• Scheduling consultations and meetings

• Performing contractual obligations

• Managing customer relationships

• Improving our website, products and services

• Measuring website performance and analytics

• Sending marketing communications (where permitted or with your consent)

• Detecting fraud and maintaining website security

• Complying with applicable legal and regulatory obligations

4. Legal Basis for Processing

We process Personal Data on one or more of the following legal bases under Article 6 GDPR:

• Consent (Art. 6(1)(a)) — marketing communications and non-essential cookies.

• Performance of a Contract (Art. 6(1)(b)) — providing consultations, certification services and fulfilling contractual obligations.

• Legal Obligation (Art. 6(1)(c)) — complying with applicable laws and regulations.

• Legitimate Interests (Art. 6(1)(f)) — improving our services, analysing website usage, ensuring business development, maintaining security and preventing fraud, provided these interests do not override your rights and freedoms.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Ensure the website functions properly

• Remember user preferences

• Analyse website traffic

• Improve user experience

• Measure advertising effectiveness

• Deliver relevant marketing content

We use the following categories of cookies:

• Necessary Cookies (always active)

• Functional Cookies

• Analytics Cookies

• Marketing Cookies

The retention period depends on the type of cookie. Some cookies expire when your browsing session ends, while persistent cookies may remain on your device for up to 24 months.
You can manage your cookie preferences through our Cookie Banner or your browser settings.

6. Sharing of Personal Data

We may share Personal Data with:

• Cloud infrastructure providers

• CRM providers

• Analytics providers

• Advertising platforms

• Meeting scheduling providers

• IT service providers

• Professional advisers (lawyers, accountants and auditors)

• Government authorities where required by law

All third parties process Personal Data under contractual obligations and appropriate security safeguards.

7. Third-Party Services

We currently use or may use the following third-party services:

• Google Analytics

• Google Ads

• Meta (Facebook) Pixel and Meta Ads — operated by Meta Platforms Ireland Limited

• LinkedIn Ads and LinkedIn Insight Tag — operated by LinkedIn Ireland Unlimited Company

• Microsoft Clarity

• Calendly

• NetHunt CRM

• Zapier

• Cloudflare

• Microsoft 365 and/or Google Workspace

These providers may process Personal Data on our behalf in accordance with applicable Data Processing Agreements and their own privacy policies.

8. International Data Transfers

Some of our service providers may process Personal Data outside the European Economic Area (EEA).
Whenever Personal Data is transferred internationally, we ensure appropriate safeguards are in place, including:

• European Commission Adequacy Decisions

• Standard Contractual Clauses (SCCs)

• Other transfer mechanisms permitted under the GDPR

9. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy.
Typical retention periods include:

• Contact requests — Up to 12 months

• Client data — Duration of the contract plus 5 years (or longer where legally required)

• Marketing communications — Until consent is withdrawn or retention is no longer necessary

• Analytics and cookie data — Up to 24 months

10. Your Rights Under GDPR

Under the GDPR, you have the right to:

• Access your Personal Data (Art. 15)

• Rectify inaccurate Personal Data (Art. 16)

• Request erasure ("Right to be Forgotten") (Art. 17)

• Restrict processing (Art. 18)

• Receive your Personal Data in a portable format (Art. 20)

• Object to processing (Art. 21)

• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at: contact@7sec.com
You also have the right to lodge a complaint with your local supervisory authority or with the Bulgarian Commission for Personal Data Protection (CPDP).

11. Data Protection Officer

We have not appointed a Data Protection Officer because we are not legally required to do so under Article 37 GDPR.
For any privacy-related enquiries, please contact: contact@7sec.com

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

13. Data Security

We implement appropriate technical and organisational measures to protect Personal Data, including:

• SSL/TLS encryption

• Secure cloud infrastructure

• Access controls based on the principle of least privilege

• Authentication and authorization mechanisms

• Regular software updates

• Internal security policies

• Protection against unauthorized access, alteration, disclosure or destruction of Personal Data

While we take appropriate measures to safeguard Personal Data, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure.

14. Confidentiality

Information shared with us during consultations, pre-sales discussions, certification projects or other business communications is treated as confidential and handled in accordance with our internal security procedures and applicable legal obligations.

15. Third-Party Websites

Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing any Personal Data.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be published on this page together with the updated effective date.

17. Contact

If you have any questions regarding this Privacy Policy or the processing of your Personal Data, please contact us:
7Security GmbH
Hiessgasse 12/3, 1030 Vienna, Austria
Website: https://pci.7sec.com
Email: contact@7sec.com