Privacy Policy

Last updated: 31 August 2026

EO SECURITY processes personal data as a data controller. This document explains how EO SECURITY processes your personal data, the purposes of the processing, how long the data is processed and what rights you have in relation to your personal data.

The processing of personal data is carried out by EO SECURITY in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter also referred to as the “GDPR”).

What personal data does EO SECURITY process about you?

The citadelphone.com website is an informational product presentation site for Citadel OS and Citadel Chat. It has no contact form and no user accounts, so in most cases you can browse it without providing any personal data. EO SECURITY processes personal data in the following situations:

If you contact EO SECURITY using the contact details published on citadelphone.com (in particular by e-mail or telephone) or via other contact details you obtain, the following personal data will be processed: your identification data, the identification of the company you are acting for, your e-mail address, your telephone number, and the information you include in your message.

In the event of a purchase of goods or services from EO SECURITY, the following personal data will be processed: the personal data necessary for the performance of the order and the conclusion of the contractual relationship, namely your identification data, the identification of the company for which you are acting, address, e-mail, telephone number and other data necessary for issuing an invoice or other information related to the contracting process.

Personal data that EO SECURITY obtains when it enters into other contracts with you or provides other services to you. In this case, identification data, contact data and other data necessary for the provision of services and the conclusion of contracts will be processed.

Website analytics. The citadelphone.com website uses Google Tag Manager to load and manage its measurement scripts, together with a privacy-friendly, self-hosted web analytics tool (Matomo) used to measure aggregate website traffic. This analytics runs in a cookieless mode: it stores no cookies on your device, anonymises IP addresses and does not track you across other websites or build advertising or marketing profiles. Because it processes no data that could identify you and uses no cookies for this purpose, this measurement does not require your consent. The website uses no advertising cookies.

Purpose of processing and legal basis

Personal data obtained by e-mail (or other contact channels) and in connection with the provision of services is processed by EO SECURITY for the purpose of delivering goods and services, the legal basis being the performance of contractual obligations under Article 6(1)(b) of the GDPR. In addition, your personal data will be processed by EO SECURITY in order to comply with legal obligations, in particular in connection with accounting and VAT. The legal basis for this processing is therefore also compliance with legal obligations pursuant to Article 6(1)(c) of the GDPR. In order for EO SECURITY to protect its own claims, for example in the context of debt recovery or litigation, EO SECURITY will also process personal data on the basis of a legitimate interest consisting in the protection of legal claims pursuant to Article 6(1)(f) of the GDPR.

Should EO SECURITY introduce, in the future, technologies that store or access information on your device (for example cookies) or that process personal data for analytics or marketing, such technologies would be used only in accordance with this policy and, where required by law, on the basis of your consent obtained through a cookie banner. Any such change would be reflected in this policy beforehand.

If you receive an e-mail offering additional services or products, this may occur in particular because you have become a customer of EO SECURITY, on the basis of the company's legitimate interest in carrying out so-called direct marketing. However, you can opt out of receiving commercial communications at any time, either before submitting any request or in any e-mail you receive from EO SECURITY. If you are not an EO SECURITY customer, you will only receive e-mails offering services or products provided that you actively opt in to receiving them. In these cases too, the rule that you can opt out of receiving commercial communications and thus refuse them in the future will be respected.

Who has access to your personal data

The following recipients have access to your personal data: employees and contractors who cooperate with EO SECURITY on the basis of a cooperation agreement or similar agreement, and providers of services (such as IT, accounting and hosting services) engaged by EO SECURITY, who process the data only to the extent necessary and under a contractual obligation of confidentiality.

Your personal data is processed within the territory of the European Union or in countries that ensure an adequate level of data protection equivalent to that of the European Union.

How long your data will be processed

EO SECURITY will only process your personal data for as long as necessary to fulfil the purposes for which it was collected — providing services and products, completing requested transactions, or for other necessary purposes such as compliance with legal obligations, dispute resolution and the legal enforcement of agreements. These needs may vary for different types of data in the context of different products and services, and therefore the actual retention period may vary significantly. The primary consideration is always the mutual contractual relationship, i.e. personal data will be processed by EO SECURITY for as long as the contractual relationship lasts. The applicable legislation also sets out various rules for the retention of documents — for example, a retention period of 10 years for accounting documents and information required for VAT purposes.

What rights you have in relation to the protection of your personal data

You have the following rights in relation to the processing of your personal data:

• the right of access to personal data;
• the right to rectification;
• the right to erasure (“right to be forgotten”);
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability;
• the right to lodge a complaint about the processing of personal data.

The right of access means that you can at any time request confirmation of whether or not personal data concerning you is being processed and, if so, for what purposes, to what extent, to whom it is disclosed, for how long it will be processed by EO SECURITY, whether you have the right to rectification, erasure, restriction of processing or to object, where the personal data is obtained from, and whether automated decision-making, including possible profiling, takes place on the basis of the processing of your personal data. You also have the right to obtain a copy of your personal data.

The right to rectification means that you can ask EO SECURITY to correct or complete your personal data at any time if it is inaccurate or incomplete.

The right to erasure means that EO SECURITY must erase your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, (iv) erasure is required by a legal obligation, or (v) in relation to personal data for which you have given your consent to the processing, you withdraw that consent.

The right to restriction of processing means that until EO SECURITY has resolved any disputed issues regarding the processing of your personal data, it may not process your personal data other than to store it and, where appropriate, may only use it with your consent or for the establishment, exercise or defence of legal claims.

The right to object means that you can object to the processing of your personal data processed by EO SECURITY on the basis of a legitimate interest, including for direct marketing purposes and profiling based on a legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes. If you object to processing on other grounds, we will evaluate the objection and then inform you whether it was justified and that we will no longer process your data, or that the objection was not justified and the processing will continue. In any event, processing will be restricted until the objection is resolved.

The right to data portability means that you have the right to obtain personal data relating to you which you have provided on the basis of consent or a contract and which is also processed by automated means, in a structured, commonly used and machine-readable format, and to have that personal data transmitted directly to another controller.

The activities of EO SECURITY are also supervised by the Office for Personal Data Protection, to which you can lodge a complaint if you are dissatisfied. You can find out more on the website of the Office (https://uoou.gov.cz/en).

Changes to this privacy policy

EO SECURITY may update this privacy policy from time to time to reflect changes in its processing activities or in applicable law. This version of the privacy policy is effective from 31 August 2026.