Privacy Policy

Last updated: January 2026

This Privacy Policy describes how Obsidia collects, processes, stores and protects personal data in connection with its website and restricted-access evaluation processes.

Obsidia operates in environments characterized by elevated confidentiality, security sensitivity and operational discretion. Data handling practices reflect these requirements.

1. Data Controller

The data controller for this website is:

OBSIDIA
Private Security Infrastructure
Website: https://obsidia.tech

2. Categories of Data Collected

Obsidia collects only data strictly necessary for security evaluation, access control and operational integrity.

• Identification data (name, country of residence)
• Contact details (email address)
• Organizational or contextual information voluntarily provided
• Technical metadata (IP address, browser type, timestamp)
• Communications submitted through controlled forms

Obsidia does not engage in behavioral profiling, advertising tracking, or data monetization.

3. Purpose of Processing

Personal data is processed exclusively for the following purposes:

• Assessment of clearance and access eligibility
• Secure communication with approved or pre-approved parties
• Protection against misuse, abuse or unauthorized access
• Compliance with legal and regulatory obligations

4. Legal Basis

Data processing is based on one or more of the following legal grounds:

• Explicit user consent through voluntary submission
• Legitimate interest in safeguarding infrastructure and operations
• Compliance with applicable laws and lawful requests

5. Data Classification & Sensitivity

Certain information provided to Obsidia may be considered sensitive due to its contextual, operational or security-related nature.

Such data is handled under enhanced confidentiality principles and may be subject to additional access restrictions.

6. Data Retention

Personal data is retained only for as long as strictly necessary to fulfill its intended purpose.

Obsidia reserves the right to anonymize or delete data at its sole discretion, particularly where requests are denied or deemed non-relevant.

7. Security Measures

Obsidia implements technical and organizational measures designed to protect data against unauthorized access, disclosure, alteration or destruction.

Due to the nature of Obsidia’s activities, certain security practices may exceed common commercial standards.

8. Data Subject Rights

Where applicable, users may request access, rectification or deletion of their personal data.

Requests may be limited or refused where disclosure would compromise security, confidentiality obligations or legal requirements.

9. Jurisdiction & Cross-Border Processing

Data may be processed or stored in jurisdictions different from the user’s country of residence, subject to appropriate safeguards.

10. Policy Updates

This Privacy Policy may be updated without prior notice. The latest version will always be available on this page.