Privacy notice

Controller

The controller of your personal data is HACKDIT, svetovanje na področju kibernetske varnosti, d.o.o., Rubije 15, 6223 Komen, Slovenia (registration number 7515103000, VAT number SI55692885), which operates the Hidedit service.

For any data protection question, write to info@hidedit.com.

What we process

Start a case form: the type of problem, whether you know where the content appears, whether you were under 18 when it was created, your name, email address, country, and an optional link and optional description.

Contact form: your name, email address, topic and message.

Automatically on submission: the time, the page the form was sent from, a hashed value of your IP address (the IP address cannot be recovered from it without a secret key held on the server) and technical identifiers used to prevent duplicate submissions. We do not store your IP address in plain form.

We do not accept images or videos through the website. Please do not send them by email either.

Our hosting provider keeps access logs (IP address, requested address, time and browser type) for the security and operation of the server.

Purposes and legal bases

Answering your enquiry and reviewing your case before a contract, and carrying out a case you confirm: Article 6(1)(b) of the General Data Protection Regulation (GDPR).

A description or case type may reveal special categories of personal data, for example about sex life. We process these on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give by ticking the box when you submit the form. You can withdraw consent at any time; this does not affect processing before the withdrawal.

Keeping the service secure and preventing abuse and automated submissions: our legitimate interest (Article 6(1)(f) GDPR).

Keeping accounting records for paid services: legal obligation (Article 6(1)(c) GDPR).

Minors

If you say you were under 18 when the content was created, or are not sure, the form does not collect links or descriptions of the content. We keep only your contact details so we can give you guidance, and we point you to specialised services (Take It Down, the INHOPE network, Spletno oko, the police).

A parent or legal guardian may also contact us on behalf of a minor.

Who has access

Only the people handling your request process your data. Requests involving intimate content and deepfakes are flagged for more restricted handling.

Website and email hosting is provided to us as a processor by Neoserv d.o.o. in Slovenia. Data is stored on a server in the European Union.

As part of a case you confirm, we send websites, platforms and search engines the details needed for a removal request. Some of them are based outside the EU; we send them only what each request requires.

We do not sell personal data or use it for advertising.

How long we keep data

Enquiries and messages that do not become a case are deleted no later than three months after we receive them, together with the copies in our mailbox.

Data about a confirmed case is kept until the case and the monitoring period included in your package have ended, and then deleted. We keep longer only what the law requires us to keep, such as invoices.

Access logs are kept by the hosting provider under its own rules.

Security

The website only works over encrypted HTTPS. Data is stored on a server in the EU and is accessible only through the hosting account. Server logs contain no names, email addresses, links or descriptions. The website loads no third-party scripts.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to processing based on legitimate interest, to data portability, and to withdraw your consent.

Send your request to info@hidedit.com. We reply without undue delay and within one month at the latest, as the GDPR requires. We may verify your identity before acting on a request.

You can lodge a complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si, or with the supervisory authority in your own EU country.

Automated decisions

We make no automated decisions about your request and do no profiling. A person reviews every request.

Cookies and browser storage

This website does not use cookies. It only writes the entry hidedit.cookieNotice to your browser's local storage when you close the cookie notice, so that it does not appear again. The entry contains no personal data and is not sent to the server. See the Cookies page for details.

Changes

We may update this notice, for example when the service changes. The date of the last update is shown at the top of the page.