Privacy Policy

Introduction

This Privacy Policy applies to the Tessen Security public website, its marketing pages, security content, and communications initiated through the website. Tessen Security provides offensive-security and cybersecurity services, including penetration testing as a service, vulnerability triage, and security and compliance validation.

This policy describes the information that may be handled when you browse the website, contact Tessen Security, or otherwise communicate with us through channels made available on the website. It does not replace the terms of a separately negotiated client engagement or services agreement.

Information we collect

The current frontend contains contact and newsletter translation labels, but no rendered contact form, newsletter subscription form, submission handler, or frontend form-processing integration was found in the audited application. Information may nevertheless be provided when you voluntarily contact Tessen Security through a channel made available to you.

The website stores selected preferences in browser local storage. It does not use local storage as a cookie.

Information you choose to send directly, such as your name, business contact details, the content of a message, or other information included in your communication.
The theme preference stored under the browser key tessen-theme.
Information contained in ordinary technical requests and server logs, if collected by the hosting or infrastructure provider. The current frontend does not identify the hosting provider or the exact fields retained in infrastructure logs.

How information is used

Information may be used only for purposes connected to the website and communications you request, including to respond to inquiries, understand service requests, provide requested information, maintain and protect the website, detect abuse, improve the website experience, keep appropriate business records, comply with legal obligations, and establish or defend legal rights.

The audited frontend contains no advertising pixel, analytics SDK, newsletter provider, CAPTCHA integration, consent manager, or form-processing provider. We therefore do not describe advertising or analytics uses that are not evidenced in the application.

Legal bases

Where privacy law requires a legal basis, the applicable basis depends on the context and the information involved. It may include your consent, steps taken at your request before entering an agreement, our legitimate interests in operating and protecting the website and responding to communications, or compliance with a legal obligation.

Where processing is based on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that occurred before withdrawal or processing that can be carried out on another lawful basis.

International data transfers

Because the hosting and infrastructure providers for the current deployment are not identified in the application, this policy does not claim a particular hosting country or transfer mechanism. Service providers may process information in jurisdictions other than the one in which you live. Where applicable law requires safeguards for an international transfer, those safeguards will be addressed by the responsible provider or applicable agreement.

Data retention

Tessen Security retains personal information only for as long as reasonably necessary for the purposes described in this policy, including responding to inquiries, maintaining appropriate business records, resolving disputes, and satisfying legal obligations. The application does not define a universal retention period, so no fixed period is stated here.

Preference values stored in your browser remain until you remove them, clear site data, or change the relevant preference. Any information handled by infrastructure or communication providers is subject to the applicable operational and legal retention requirements of those providers.

Data security

Tessen Security uses reasonable technical and organizational safeguards appropriate to the nature of the information and the context in which it is handled. No website, transmission, or storage system can be guaranteed to be completely secure. Please avoid sending secrets, credentials, or sensitive testing data through an unrequested website communication.

Your privacy rights

Depending on where you live and applicable law, you may have rights to request access to, correction of, deletion of, or restriction of processing of your personal information. You may also have rights to object to certain processing, request portability, or withdraw consent where processing is based on consent.

Requests may be submitted through the website contact page. We may need to verify the request and may apply lawful limitations or exceptions. If you receive a newsletter from a future or separate subscription system, use its unsubscribe mechanism or contact us to request removal.

Children's privacy

The Tessen Security business website is intended for professional and business audiences and is not directed to children. We do not knowingly seek personal information from children through the public website.

Third-party links

The website may link to external websites, including social or professional platforms. Those websites operate under their own privacy practices and terms. Tessen Security is not responsible for the content or privacy practices of external websites.

Changes to this policy

This policy may be updated when the website, its information practices, or applicable requirements materially change. The Last updated date at the top of this page will identify the current version.

Contact regarding privacy

Privacy-related requests may be submitted through the website contact page. Please include enough information for us to understand and respond to your request.

Go to contact