Data protection / GDPR

Processor

The service operator, processing customer data on the customer's documented instructions, is Rafał Będkowski, a natural person operating the Certyx website available at https://certyx.space. Contact for data processing and data protection matters: support@certyx.space.

Customer processing agreement

Before the service processes customer data, the customer and the operator conclude an Article 28 GDPR data processing agreement describing subject matter, duration, nature and purpose, data types and categories of individuals, controller instructions and the parties’ responsibilities.

Security and authorized personnel

The agreement specifies confidentiality, least-privilege access, separate customer environments, protected transport, key handling, audit controls, recovery procedures and periodic review of their effectiveness.

Subprocessors and international transfers

The agreement lists subprocessors, hosting locations and transfer safeguards, and customers are informed of changes in advance. The current list is available from support@certyx.space.

Assistance and incidents

The operator assists with data-subject requests, notifies personal data breaches without undue delay, supports data protection impact assessments and supervisory inquiries, and provides audit evidence as agreed. Security and privacy contact: support@certyx.space.

End of service

At the end of the service, customer data is returned or deleted as the agreement specifies, subject to legal retention duties and backup expiry.

Individual notice

For account and service-security data, read the privacy policy. Necessary service processing is not authorized through an indiscriminate “I accept GDPR” checkbox. Separate optional consent is used only for an actual optional purpose.