Privacy Policy

1. Overview

ClickSafe ("we", "us", "our") is committed to protecting the privacy of our website visitors and customers. This privacy policy explains how we collect, use, and protect your personal data when you visit clicksafe.eu or use our services.

2. Data Controller

Arpad Jo is the controller for this website and ClickSafe account data. For employee data that a customer organization uploads or generates through the app, the customer organization is the controller and ClickSafe processes that data on the organization's instructions.
Arpad Jo — ClickSafe
Am Schöpfwerk 5
Vienna, Austria
VAT ID: ATU82601506
Email: [javascript required]

3. Data We Collect

When you use our website, we may collect the following data:

  • Contact form details such as your name, email address, and message
  • If you use the ClickSafe app: account and organization details, employee contact details, campaign interaction events, and training progress or quiz results
  • Technical and security data, which may include IP address and browser information; Google Analytics data is collected only after you opt in

4. Purpose of Data Processing

We process your data for the following purposes:

  • To respond to your enquiries and demo requests
  • To provide and improve our website and services
  • To comply with legal obligations
  • To protect our legitimate business interests

5. Legal Basis

We process personal data based on: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR).

6. Data Storage & Hosting

The marketing website runs on Vercel with its deployment region configured in Frankfurt, Germany (eu-central-1 / fra1). The ClickSafe app runs on Railway in EU West (Amsterdam, Netherlands). Contact email is handled through Tárhely.com in Central Europe (Slovakia). These are the configured service regions provided to us; they do not by themselves confirm where every backup, log, support operation, or analytics flow is processed. Google Analytics is used only if you accept analytics cookies. Contact messages are deleted from the active mailbox after we reply. When an organization closes its ClickSafe account, its data is deleted from the active application database. This does not itself erase provider-managed backups or operational logs, queue metadata, or emails and reports already delivered to recipients; those copies are outside the database deletion operation and follow the relevant provider's or recipient's retention controls.

7. Your Rights

Under GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time, where processing is based on consent
  • Right to lodge a complaint with the Austrian Data Protection Authority

To exercise any of these rights, please contact us at [javascript required].

8. Cookies

A necessary local-storage entry remembers your cookie choice. Google Analytics is not loaded unless you select Accept. You can change or withdraw your choice at any time using Cookie settings in the footer. Withdrawing consent stops analytics from loading on subsequent page loads and removes accessible Google Analytics cookies. Refusing analytics does not affect essential site functions.

9. Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on this page. Last updated: October 2026.